I will post link of screenconnect / connectwise servers along with info on registrar and hosting.
Any help on this matter is welcome friend! There is a couple of threads on this subject already, hope you can help with this!
Yes. I am not against Screen Connect. I am against screen connect server used by scammer. I am aware, there is another group with similar purpose, just making my own for some reason. I hope admins will not be mad at me.
I have plenty of conversations with that company. I’m talking to somebody and they’re trying to help them to resolve this issue with any scammers using screen connect. we need to get together to resolve this with them.
because the scammers found a way to cracking the software with a file or using a 30 day trial. they know it’s hard to keep a track of all of what’s going on here
Even i mailed to company many times, they reply me after 5 or 6 days, by that time they switch the domains or domains are dead after complain
that’s why I go after the IP address
url: https://s3.azz1back.site:8443/guest
here people call him coffeeshop guy
Domain registrar: dynadot
Hosting: Virtual Systems LLC
IP: 45.11.57.132
AS 6698
New hiding technique
This is a masked site → Inside in hidden iframe, it has https://s3699.passefund.info:8443/guest
they can dynamically change url from using
https://shelp1.org/data.php?id=1
you can change id = {number}, it will redirect you to scammers screen connect domain when the domain opens, at the end of the domain just add /guest or /guest.aspx or /login
it will popup their page.
Sam old MFer
sup701.org with code 68559
Can you take this site down: mfrb.site code 80MU56S
gdwn.site with code 98AA58K
Fake Coinbase support
iframe load from => help16.org
main server => https://b3699.bhisholikor.org:8443/guest