Taking out ConnectWise sites

There’s some super complicated JavaScript obfuscation stuff but the backend is:

https://s9639.gitokearist.icu:8443

API call is: https://s9639.gitokearist.icu:8443/Services/PageService.ashx/GetLiveData

Yeah, they have some people with know-how doing this for shit for them.

https://cpkhelp.live/

https://www.dkhelp.info/
redirecting to
https://ttre987k.cfd/Guest32xw.aspx/?Session=3d28c8be-f58a-48dc-b435-79c54787b3a8

https://bnhelp.org/

bnhelp.org backed by https://lamolatori.cyou:8443/Services/PageService.ashx/GetLiveData

https://wthelp.org/

https://ghbd.link/

https://lvhelp.top/

https://ghbd.link:8443/

https://www.bqhelp.top/

https://wrhelp.top/

https://nrhelp.top/?__cf_chl_tk=Gfk2rfOI.FM_vNdhmv0wcWPrqJ085jQPmUZUt47T7l0-1725290047-0.0.1.1-4628

https://pyhelp.top/

redirects to https://c9.help2.top/

https://qfzhelp.site/

https://smhelp.top/

https://fmqhelp.site/?__cf_chl_tk=GK9_aJ9kyJ2zf_sozQZp0umhY4cvN69mDI2NAYgAn.0-1725389195-0.0.1.1-4607

https://ejthelp.site/

https://e2help.live/
re-directing to
https://yjkl77.top/Guest32xw.aspx/?Session=2014924f-fb75-47ea-8ab9-fa5c99f8bcee

https://1fhyyht4jm.me/