Taking out ConnectWise sites

02/03/25 iwhelp.top 172.67.193.79 Cloudflare/Gname
02/03/25 gajrokerring.cyou 172.67.214.6 Cloudflare/Gname
1 Like

https://btdcare.help/
https://justcare.help/
https://drvcare.help/
https://www.kzhelp.top/

2 Likes

http://get2factor.com/ (This site is an automatic download of SupportClientSetup.exe)

1 Like

qthelp.top by Paypal scammers

1 Like

jnhelp.top

1 Like

https://c18.help9.top/

2 Likes

kaptohelp.top

1 Like

www.ighelp.top
https://www.qthelp.top/

2 Likes

https://drvcare.help/?__cf_chl_rt_tk=6rkWo0X83G_MAStlsUx7FhPNlanHImgu5mp6PbD9ePY-1738765201-1.0.1.1-05LRGmwCjievERGIkQVj01M_t1yCOSFF_QRtxFl2X6U
https://obkm.cc:9113/

1 Like

02/05/25 mrmhelp.top 194.59.30.213 Virtuo/Namesilo

Same URL for the download

https://emcare.help/
https://www.krhelp.top/
(They are doing slight variants on existing themes)

2 Likes

02/06/25 www.hihelp.top 188.114.97.3 Cloudflare/Gname

This one requires the www to come up, most don’t. Thought they were getting on a phone. This one is same URL download

02/06/25 kaptohelp.top 194.59.30.60 Virtuo/Namesilo

Thought they were getting on a phone - same URL download

https://pbrk.org/
https://www.kahelp.top/

1 Like

02/06/25 www.izhelp.top 172.67.166.161 Cloudflare/Gname

Another that requires the www - and same URL download

02/06/25 juhelp.top 104.21.112.1 Cloudflare/Gname

Again, these are all work-arounds that lead to the same host.
https://www.bvhelp.top/
https://www.echelp.top/?__cf_chl_rt_tk=dCDS7ZxRVkE5coABLKF8abvrBLX2pFK0CTv4UvVbt04-1738880822-1.0.1.1-b79ehxFpNAZoJlZ4IQiJiYMAMXZXlozqCL8KAR95YsE

1 Like

https://www.quhelp.top/ (same variant on existing theme)
https://kyhelp.top/?__cf_chl_tk=AuuF.VT2SrpYuwJF2Sz_uwoXSwReB.5vE1lPG.lVWA8-1738950405-1.0.1.1-fBO48GtS4HnFaxuowDDeHnRHGZWI1jzneTxmhFNA0aQ
https://carenet.help/
https://www.qzhelp.top/
https://mbhelp.top/

1 Like

https://revcare.help/
https://pqsupport.help/
https://msinfo.help/

1 Like