Taking out ConnectWise sites

rbdm.us Code: 53654

3 Mi Piace

The owner of rbdm.us (and a load of others) tried to evade the bot lmao, the site has once again been taken down.

3 Mi Piace


“The secure suppoat serwer appears to be hawing some teckhikal difficulties…”

7 Mi Piace

I didn’t see this one listed so here’s another site,
apnh2.top

6 Mi Piace

https://mcomfix.org

4 Mi Piace

and another site,
https://m3324.yesgkbk1gk.site:8443/Guest

4 Mi Piace

mcomfix.org was masking m3324.yesgkbk1gk.site, ive taken it down
apnh2.top has also been taken down

ill hold them offline for a few hours during peak scam times

im currently rewriting the bot to get rid of some of the jank in it that was introduced to get around some of the methods the site resellers are using to try to evade my bot

2 Mi Piace

School me. What is Connect Wise and how does it relate to scammers? I too have ‘methods’ to burn down sites. However I usually stick to burning down confirmed pedo sites.

5 Mi Piace

ConnectWise ScreenConnect is a tool scammers use to connect to victims PCs, its usually self hosted on bulletproof hosts so we cant just report them easily. Its also completely invisible to the victim which is why scammers like it.

On the other hand its hilariously insecure and its proprietary garbage so its very difficult for the scammers to patch the many vulnerabilities in it, which is why I like it.

8 Mi Piace

Not that different from a RAT, that’s why they need to be shut down.

4 Mi Piace

bhelp.live Code: 37396

This is fake Best Buy/ Geek Squad website which asks for a code which when entered will then download a connectwise file onto your computer.

3 Mi Piace

Screenconnect is legitimate software that’s sold primarily for enterprise ability to provide their employees remote support and monitoring. Scammers use cracked versions of the software and trick victims into downloading it and use it like a RAT.

Unlike other remote control software like TeamViewer, Ultraviewer, Anydesk etc screenconnect is very well hidden and hard to remove.

5 Mi Piace

Another site that auto-downloads screen-connect client,
bpnh2[dot]top/?Session=68e445aa-e8c7-45cc-8404-db9362556be7

6 Mi Piace

That is a bad site brother, it does auto-download that app with no code needed!!

7 Mi Piace

MFers still active

https://m3324.yesgkbk1gk.site:8443/Guest

5 Mi Piace

Same guy making multiple connectwise server

https://s3699.loginlink2.site:8443/login

4 Mi Piace

MFer are shrooming like mushroom with new websites

https://s3.azz1back.site:8443/guest

4 Mi Piace

Sam Mfers
main link: https://gcompro.org/
iframe => https://g3.azz1back.site:8443/guest#

if open without guest#

it show coffee house fake page

https://g3.azz1back.site:8443/

4 Mi Piace

Two more,
tkwp.info,
bpnh2.top

6 Mi Piace

And another site,
https://mkuy1.top/Guest32xw.aspx/?Session=c8b99d28-ce3d-495f-8001-9641edbfeca4

6 Mi Piace