ConnectWise Control scam websites...list them all here for learning

LordOfTheRings · 3 March 2024 03:27

There are distinct lazy patterns of practice in everything associated with scammers, it can’t help but be noticed.
They always take the lazy option and expend little to no energy in any area of their garbage low intelligence fraud operations.
From purchasing telephone numbers in huge consecutive blocks of several hundred, up to several thousand, similar patterns of behavior can be seen with everything they do.
It’s also what makes them so easy to predict their next move, they telegraph it through previous behavioral patterns.
The exact same thing can be said with every website and domain they register to host their illegal and fraudulent use of Microsoft Corporation trademarked ConnectWise Control screen sharing software.

For many years they have been using the identical patterns with web domains
I have found thousands of them well before they ever use them, they open them up months ahead of the need to use them.

They are generally all connected and they use them at random because of that. They get a few miles out of them and close them down, there’s always plenty more ready to go at all times.

I wont post the now mostly dead identical blocks of these sites, which invariably have shared the exact same pattern characteristics for every prefix sequence they use.
There has been in excess of 1000 of them over the last 14 months or so

These are currently all active sites and there is plenty more other than these. It’s hard not to notice patterns of laziness and ineptitude
Leaping out and kicking you in the face is how obvious it has been for years…there isn’t any mystery to where they will be tomorrow or next week
It’s exactly how I know what toll free numbers they’ll be on tomorrow in their hundreds/thousands.
It’s all about seeing the forests through those pesky trees that keep getting in the way, something I built a very successful career upon taking notice of human traits and behavior, then staying 10 moves ahead on the chess board at all times.

Extremely easy to predict. The only thing that dictates it all is the letter before the “24”
They also use the suffix endings such as these to name a few

.info
.help
.us
.cc
.top
.live
.site
.xyz

They have also used identical prefix sequences, the middle letters being for exmple

“help247”

The majority of them are simple spawned copies of the same in basic color schemes
Some slight variations on these do show up from time to time at random

BLUE

GREEN

SOMETIMES THIS DESIGN IN RED, GREEN, OR BLUE

OR SLIGHTLY MORE PROFESSIONAL STOLEN CORPORATE TRADEMARKED LOGO SITES SUCH AS NORTON, MCAFEEE, PAYPAL, MICROSOFT, QUICKBOOKS, ZELLE & AMAZON

List ConnectWise Control sites here
Always stand back and look at the forest beyond the trees, they are rarely one off stand alone creations. There is always a pattern to be seen and it will always apply without fail
Hopefully these dopey fucks notice this and shit litters of screaming bright purple kittens.
I’ve been watching you and working out your next moves for years.
You all aren’t very clever
Everyone should notice these blatantly obvious traits
More of a challenge is required scamtards!

https://nxcare.info/
https://ppcare.info/
https://rbcare.info/

This scam site has changed amongst different styles of ConnectWise Control front ends over the months I’ve been watching it and others with the same prefixes, which now are all mostly dead
Now is has taken on an even more sinister task it appears.
This password stealing fake Chase bank account set up site now
for scammers to sign victims up for a fake bank/checking account to do ridiculous hacker thwarting duplicate dollar value transactions more than likely.
Everyone knows this is the only way to cancel an online banking direct debit transaction…do another one to trick those over smart hackers!
virtually none of the links work on the page, with the majority linking back to the site url

https://bscare.help/

MaggieMay · 3 March 2024 04:42

Yes, I ran into this site a few times, I’m surprised it’s still working, I reported this to connectwise management about a month ago, oh well, I’m glad it’s listed here, I didn’t know there was a thread here.

SouthernCulture_x · 19 April 2024 22:38

ghelp1.org
g3639.passefund.info

SouthernCulture_x · 13 May 2024 12:57

https://g.screenconnect.com/?Session=b6890df5-342f-42d3-90e9-8e96072fd0e4