rbdm.us Code: 53654
The owner of rbdm.us (and a load of others) tried to evade the bot lmao, the site has once again been taken down.
I didn’t see this one listed so here’s another site,
apnh2.top
and another site,
https://m3324.yesgkbk1gk.site:8443/Guest
mcomfix.org was masking m3324.yesgkbk1gk.site, ive taken it down
apnh2.top has also been taken down
ill hold them offline for a few hours during peak scam times
im currently rewriting the bot to get rid of some of the jank in it that was introduced to get around some of the methods the site resellers are using to try to evade my bot
School me. What is Connect Wise and how does it relate to scammers? I too have ‘methods’ to burn down sites. However I usually stick to burning down confirmed pedo sites.
ConnectWise ScreenConnect is a tool scammers use to connect to victims PCs, its usually self hosted on bulletproof hosts so we cant just report them easily. Its also completely invisible to the victim which is why scammers like it.
On the other hand its hilariously insecure and its proprietary garbage so its very difficult for the scammers to patch the many vulnerabilities in it, which is why I like it.
Not that different from a RAT, that’s why they need to be shut down.
bhelp.live Code: 37396
This is fake Best Buy/ Geek Squad website which asks for a code which when entered will then download a connectwise file onto your computer.
Screenconnect is legitimate software that’s sold primarily for enterprise ability to provide their employees remote support and monitoring. Scammers use cracked versions of the software and trick victims into downloading it and use it like a RAT.
Unlike other remote control software like TeamViewer, Ultraviewer, Anydesk etc screenconnect is very well hidden and hard to remove.
Another site that auto-downloads screen-connect client,
bpnh2[dot]top/?Session=68e445aa-e8c7-45cc-8404-db9362556be7
That is a bad site brother, it does auto-download that app with no code needed!!
MFers still active
Same guy making multiple connectwise server
MFer are shrooming like mushroom with new websites
Sam Mfers
main link: https://gcompro.org/
iframe => https://g3.azz1back.site:8443/guest#
if open without guest#
it show coffee house fake page
Two more,
tkwp.info,
bpnh2.top