Taking out ConnectWise sites

rbdm.us Code: 53654

3 „Gefällt mir“

The owner of rbdm.us (and a load of others) tried to evade the bot lmao, the site has once again been taken down.

3 „Gefällt mir“


“The secure suppoat serwer appears to be hawing some teckhikal difficulties…”

7 „Gefällt mir“

I didn’t see this one listed so here’s another site,
apnh2.top

6 „Gefällt mir“

https://mcomfix.org

4 „Gefällt mir“

and another site,
https://m3324.yesgkbk1gk.site:8443/Guest

4 „Gefällt mir“

mcomfix.org was masking m3324.yesgkbk1gk.site, ive taken it down
apnh2.top has also been taken down

ill hold them offline for a few hours during peak scam times

im currently rewriting the bot to get rid of some of the jank in it that was introduced to get around some of the methods the site resellers are using to try to evade my bot

2 „Gefällt mir“

School me. What is Connect Wise and how does it relate to scammers? I too have ‘methods’ to burn down sites. However I usually stick to burning down confirmed pedo sites.

5 „Gefällt mir“

ConnectWise ScreenConnect is a tool scammers use to connect to victims PCs, its usually self hosted on bulletproof hosts so we cant just report them easily. Its also completely invisible to the victim which is why scammers like it.

On the other hand its hilariously insecure and its proprietary garbage so its very difficult for the scammers to patch the many vulnerabilities in it, which is why I like it.

8 „Gefällt mir“

Not that different from a RAT, that’s why they need to be shut down.

4 „Gefällt mir“

bhelp.live Code: 37396

This is fake Best Buy/ Geek Squad website which asks for a code which when entered will then download a connectwise file onto your computer.

3 „Gefällt mir“

Screenconnect is legitimate software that’s sold primarily for enterprise ability to provide their employees remote support and monitoring. Scammers use cracked versions of the software and trick victims into downloading it and use it like a RAT.

Unlike other remote control software like TeamViewer, Ultraviewer, Anydesk etc screenconnect is very well hidden and hard to remove.

5 „Gefällt mir“

Another site that auto-downloads screen-connect client,
bpnh2[dot]top/?Session=68e445aa-e8c7-45cc-8404-db9362556be7

6 „Gefällt mir“

That is a bad site brother, it does auto-download that app with no code needed!!

7 „Gefällt mir“

MFers still active

https://m3324.yesgkbk1gk.site:8443/Guest

5 „Gefällt mir“

Same guy making multiple connectwise server

https://s3699.loginlink2.site:8443/login

4 „Gefällt mir“

MFer are shrooming like mushroom with new websites

https://s3.azz1back.site:8443/guest

4 „Gefällt mir“

Sam Mfers
main link: https://gcompro.org/
iframe => https://g3.azz1back.site:8443/guest#

if open without guest#

it show coffee house fake page

https://g3.azz1back.site:8443/

4 „Gefällt mir“

Two more,
tkwp.info,
bpnh2.top

6 „Gefällt mir“

And another site,
https://mkuy1.top/Guest32xw.aspx/?Session=c8b99d28-ce3d-495f-8001-9641edbfeca4

6 „Gefällt mir“