There is currently a way to make scammers ConnectWise ScreenConnect sites unusable (by breaking their ability to read codes), if you find any sites, please drop them here and ill take them out.
Even if the hosting providers turn their backs, we can still shut them down.
Heres the ones ive taken down so far (assuming my badly written script dosent crash lmao):
norf1.top
8do3.wkrtpbaksr.sclogins.net
9g4j.jtrporbks.loginlink2.site
abdk.cc
bw74.pnfgseyj.loginlink2.site
bws1backss.site
c0e2.rcbnlhytey.loginlink2.site
d46j.cpdsthrt.loginlink2.site
fl90.cast1backt.sclogins.net
gw63.vk1bpmnackk.sclogins.net
lijw1.top
hkyt1.top
m3324.yesgkbk1gk.site
quickpchelp.net
s4g9.tf1bacerkf.loginlink2.site
sup2.osc247.ru
zoneimport.g3639.gleeze.com
edit: (a LOT more have been added since I posted this, literally hundreds)
Some of them wont load at all, some will load, but will fail to read the code/generate the exe, some will throw an error.
20 Likes
Nice OneâŚpchelp1800.org for your listâŚCheersâŚCol
6 Likes
pchelp1800.org was masking sup2.sp101.ru
its been added to the list
4 Likes
Weâre watching these sites very well.
3 Likes
A lot of those are masked, do you have any valid codes for them?
2 Likes
If I can find a number that uses them, I tend to see Norton ones using ConnectWiseControl and they provide codes.
I usually just to mess with them, play dumb and delete the file and make him do it ALL over again and forces him to give me ANOTHER code.
5 Likes
if you can save the codes thats great
the way their masked means they wont reveal the real connectwise instance until they get a valid code
3 Likes
If you find a number that uses them post it here, going and deleting the connectwise file will force them to give you multiple.
4 Likes
Just updated the script, it should be a lot more effective now
4 Likes
once i have a valid code i can see all the other codes on the server
its just getting that first code so the mask site reveals the backend server
4 Likes
Now, we just need numbers to call. Call centers use multiple websites, so we just need to bait them until we get all of them down.
4 Likes
I know a load of active numbers which can be tried for ConnectWise Control codes
I never speak to these low class dolts
My IQ suffers greatly just hearing them say âsuppoatâ, âsuppertâ or numerous other barely legible grunts a couple of thousand times a day
Iâll make a thread and dump a few in there
4 Likes
Thank You, will look into it
3 Likes
Numbers are always welcome. We always have folks looking forward to speak to scammers
5 Likes
Heres the sites im currently holding offline:
[âlijw1.topâ, âsup2.osc247.ruâ, âjfrd1.topâ, âhdkrty.sbsâ, âkrto.ccâ, âbmck.usâ, âfxvt1.topâ, âsup2.sp101.ruâ, âmkuy1.topâ, âabdk.ccâ, âbaka1.topâ, âimar1.topâ, âdkrc1.topâ, âcdrm1.topâ, âdfgy1.topâ, âciwa1.topâ]
5 Likes
gcompro.org code â10195â
4 Likes
They are trying to use a different port to avoid my bot lmao
5 Likes
