Taking out ConnectWise sites

General Discussion
566

https://control.ctrl900.ru/

567
12/06/24 qchelp.top 172.67.221.111 Cloudflare/Gname.com - 78hv31l
12/06/24 atgajroker.icu 188.114.97.3 Cloudflare/Gname.com
568

https://xmhelp.top/?__cf_chl_tk=SqHaw2xMNbwOjUAr3rQ1VtbR23EK50WEdVb1.RcztH8-1733516575-1.0.1.1-ZMtCYquJri2tXCaYZSxBBrrxKPv3ZTH_P5JZ9feWWQs,
and,
https://azcare.help/,
and,
https://mgbhelp.top/

569

https://plphelp.top/

570

https://blphelp.top/,
and,
https://www.bqhelp.top/,
and,
https://oihelp.top/?__cf_chl_rt_tk=Hq9fOsJukCmwvipJARf0P_GTsBMb2OcwRLedESNT648-1733600090-1.0.1.1-NbS_XNKblks6tauj0SvuWPajGwsnw2Gki1vSm3muZJo,
and,
https://d4m.top/

571

here’s the complete URL and back site for https://dm4.top,
https://d4m.top/?__cf_chl_rt_tk=ypPX9Vt6EfVfo2c5uUpjJmJrZiJFPVxqR9Qw5VF0bqI-1733603523-1.0.1.1-F4pRazKKNhAr9_l9loZR9xgYOlufoVcPkxqmtqXlRf4

572

https://mrhelp.top/

573

12/09/24 rjhelp.top 104.21.112.1 Cloudflare/Gname.com - 36YJ18I
12/09/24 molatoriora.icu 188.114.97.3 Cloudflare/Gname.com

This download has been used before on 3 different URLS

10/03/24 os2.ouhelp.top 104.21.0.109 Cloudflare/Gname.com Pte. Ltd.
10/03/24 molatoriora.icu 176.97.123.101 Virtual Systems LLC/Gname.com Pte. Ltd.
10/28/24 j8n.top 188.114.96.3 Cloudflare/Gname.com Pte. Ltd.
10/28/24 molatoriora.icu 188.114.97.3 Cloudflare/Gname.com Pte. Ltd.
11/25/24 elhelp.top 188.114.96.3 Cloudflare/Gname.com
11/25/24 molatoriora.icu 188.114.96.3 Cloudflare/Gname.com

574

Keep up the good work! It’s appreciated.

575

12/09/24 wdmcare.help 104.21.16.1 Cloudflare/Namesilo - 12308

First reported on the 2nd - different IP
12/02/24 wdmcare.help 188.114.96.9 Cloudflare/Namesilo

Oh, yeah - forgot. Download is the same URL

576

https://as4care.live/

577

https://rjhelp.top/?__cf_chl_rt_tk=VHB_YuyMhxPswBomvnJfAZe3HopxJ3UmFlxcxfIBZeg-1733781732-1.0.1.1-3zMUT6.u0YgLn6LG9etNe6s0823daUWe8c7nqdru4sQ,
and,
https://djhelp.top/?__cf_chl_rt_tk=8391PVnoCROF_IVJlLGpcbv65vF5IEDARXzU8BfBb08-1733785094-1.0.1.1-gMQ81iwgGRZSb54FVvD4ntDfofwjTZT7YiaJKhddJGA,
and,
https://mecare.help/?__cf_chl_rt_tk=9N0sKDVVYGLjT.toMk0w5fl5Q7rdd3nNlHN3cYQIjYA-1733785650-1.0.1.1-LOeE3zKmC4ZuRhPNL0yjkm.DnquaI6IdbSDBFsAVYm4

578
12/10/24 i2secure.live 37.221.64.202 Alexhost/Namesilo - 41921
12/10/24 obrm-h4.top 37.221.64.118 Alexhost/Namesilo
579

https://dnhelp.top/?__cf_chl_rt_tk=ciy4WQgPP7BDq.A7ZM1s_oLQgPdyaD8I02S6fMyIEf4-1733853445-1.0.1.1-dpu2yiHg6gwHqhwfFexxrmGl.uEI0CaZmrtL_i48Xqo

580

https://dkcare.help/,
and,
https://iwhelp.top/?__cf_chl_rt_tk=NCew.XGcd04ZzPUrmTTtEGl6zkT2oORezYj10_WOb54-1733933777-1.0.1.1-Cf8ZoHA7PxerNj5lGeXE.yCyp0apW5EF8OSusrReQO8

581
12/11/24 pcsup109.org 104.21.21.92 Cloudflare/Gransy - gx50246
12/11/24 sup2.sysx231.ru 185.66.89.123 Virtual Systems LLC/Russia
582

https://afhelp.top/?__cf_chl_rt_tk=F_5T6QZehuonWKGVCP338BYl9ZsHMovhHVn._5NwwTA-1733944641-1.0.1.1-gfD_n34yFDFxGJDqxqGGBcl2mEbMCTp7WLUZeRoW75k,
and,
https://wdcare.live/

583

12/11/24 mrhelp.top 104.21.88.122 Cloudflare/Gname - 22ef22a
12/11/24 gajrokerring.icu 172.67.155.171 Cloudflare/Gname

Looks like the main page IP moved
11/25/24 mrhelp.top 172.67.178.182 Cloudflare/Gname.com
11/25/24 gajrokerring.icu 172.67.155.171 Cloudflare/Gname.com

584

https://ighelp.top/?__cf_chl_rt_tk=zaxyE7fN1bfu3Z7df9hFAACplrbeeJ.wDvCMCh58bYw-1733947177-1.0.1.1-vm8tXyGWoZVlKAzN.paXom0tCc9xB7ud_jjJJ0cKKQk

585
12/11/24 dkcare.help 104.21.48.1 Cloudflare/Namesilo
12/11/24 krhelp.top 104.21.73.135 Cloudflare/Gname