Taking out ConnectWise sites

rbdm.us Code: 53654

3 Likes

The owner of rbdm.us (and a load of others) tried to evade the bot lmao, the site has once again been taken down.

3 Likes


“The secure suppoat serwer appears to be hawing some teckhikal difficulties…”

6 Likes

I didn’t see this one listed so here’s another site,
apnh2.top

6 Likes

https://mcomfix.org

4 Likes

and another site,
https://m3324.yesgkbk1gk.site:8443/Guest

4 Likes

mcomfix.org was masking m3324.yesgkbk1gk.site, ive taken it down
apnh2.top has also been taken down

ill hold them offline for a few hours during peak scam times

im currently rewriting the bot to get rid of some of the jank in it that was introduced to get around some of the methods the site resellers are using to try to evade my bot

2 Likes

School me. What is Connect Wise and how does it relate to scammers? I too have ‘methods’ to burn down sites. However I usually stick to burning down confirmed pedo sites.

5 Likes

ConnectWise ScreenConnect is a tool scammers use to connect to victims PCs, its usually self hosted on bulletproof hosts so we cant just report them easily. Its also completely invisible to the victim which is why scammers like it.

On the other hand its hilariously insecure and its proprietary garbage so its very difficult for the scammers to patch the many vulnerabilities in it, which is why I like it.

8 Likes

Not that different from a RAT, that’s why they need to be shut down.

4 Likes

bhelp.live Code: 37396

This is fake Best Buy/ Geek Squad website which asks for a code which when entered will then download a connectwise file onto your computer.

3 Likes

Screenconnect is legitimate software that’s sold primarily for enterprise ability to provide their employees remote support and monitoring. Scammers use cracked versions of the software and trick victims into downloading it and use it like a RAT.

Unlike other remote control software like TeamViewer, Ultraviewer, Anydesk etc screenconnect is very well hidden and hard to remove.

5 Likes

Another site that auto-downloads screen-connect client,
bpnh2[dot]top/?Session=68e445aa-e8c7-45cc-8404-db9362556be7

6 Likes

That is a bad site brother, it does auto-download that app with no code needed!!

7 Likes

MFers still active

https://m3324.yesgkbk1gk.site:8443/Guest

5 Likes

Same guy making multiple connectwise server

https://s3699.loginlink2.site:8443/login

4 Likes

MFer are shrooming like mushroom with new websites

https://s3.azz1back.site:8443/guest

4 Likes

Sam Mfers
main link: https://gcompro.org/
iframe => https://g3.azz1back.site:8443/guest#

if open without guest#

it show coffee house fake page

https://g3.azz1back.site:8443/

4 Likes

Two more,
tkwp.info,
bpnh2.top

6 Likes

And another site,
https://mkuy1.top/Guest32xw.aspx/?Session=c8b99d28-ce3d-495f-8001-9641edbfeca4

6 Likes