Taking out ConnectWise sites

12/20/24 afhelp.top 104.21.112.1 Cloudflare/Gname - 58PD77A
12/20/24 atmolatori.icu 188.114.96.3 Cloudflare/Gname

That sounds like Alexhost - they brag on their website they are DMCA free and REFUSE to take down sites

12/20/24 fihelp.top 104.21.48.1 Cloudflare/Gname - 32UT59N/798786
12/20/24 gajrokerware.icu 188.114.97.3 Cloudflare/Gname

Second code they thought they were getting on a cell phone

Download last seen used with wmhelp.top
11/22/24 wmhelp.top 172.67.156.157 Cloudflare/Gname.com
11/22/24 gajrokerware.icu 188.114.97.3 Cloudflare/Gname.com

1 Like

https://www.gxhelp.top/

1 Like

mrhelp.top is still in play. one scammer gave me this today.

1 Like

ppl.help9.top

1 Like

https://gxhelp.top/?__cf_chl_tk=cuXmrIb7EoTl0D0PNWKF3zgo72rYhpzUIhIvaU90an0-1734728437-1.0.1.1-2hqQ08gqS0Rwq1x6GoasB0ioaxr31DFz5smrpc2FyA8

1 Like

thats an offshore of https://gajrokerring.icu

off shore of https://cogajroker.icu

Yup and I’ve noticed if you looked at all of their ASNs, you will find a handful of connectwise sites which has a SUPER high probability of it being used for scamming because of their DMCA policy

Can you send the phone number?

molatorier.icu - main site
gzhelp.top - alternative site which is using molatorier.icu

both are using cloudflare so just report to cloudflare

https://xlhelp.top/?__cf_chl_rt_tk=Bnf66ArRRx2j84A6t1sKthDI93qnZv0NhpFAauKU4v0-1734808074-1.0.1.1-PI8j52ntkLURPah3nTA0OVbAIoPlwOzGRuJvsTjrmQQ

1 Like

https://xkhelp.top/,
and,
https://qbhelp.top/,
and,
https://nohelp.top/