02/03/25 | iwhelp.top | 172.67.193.79 | Cloudflare/Gname |
---|---|---|---|
02/03/25 | gajrokerring.cyou | 172.67.214.6 | Cloudflare/Gname |
http://get2factor.com/ (This site is an automatic download of SupportClientSetup.exe)
qthelp.top by Paypal scammers
jnhelp.top
kaptohelp.top
www.ighelp.top
https://www.qthelp.top/
https://drvcare.help/?__cf_chl_rt_tk=6rkWo0X83G_MAStlsUx7FhPNlanHImgu5mp6PbD9ePY-1738765201-1.0.1.1-05LRGmwCjievERGIkQVj01M_t1yCOSFF_QRtxFl2X6U
https://obkm.cc:9113/
02/05/25 mrmhelp.top 194.59.30.213 Virtuo/Namesilo
Same URL for the download
https://emcare.help/
https://www.krhelp.top/
(They are doing slight variants on existing themes)
02/06/25 www.hihelp.top 188.114.97.3 Cloudflare/Gname
This one requires the www to come up, most don’t. Thought they were getting on a phone. This one is same URL download
02/06/25 kaptohelp.top 194.59.30.60 Virtuo/Namesilo
Thought they were getting on a phone - same URL download
02/06/25 www.izhelp.top 172.67.166.161 Cloudflare/Gname
Another that requires the www - and same URL download
02/06/25 juhelp.top 104.21.112.1 Cloudflare/Gname
Again, these are all work-arounds that lead to the same host.
https://www.bvhelp.top/
https://www.echelp.top/?__cf_chl_rt_tk=dCDS7ZxRVkE5coABLKF8abvrBLX2pFK0CTv4UvVbt04-1738880822-1.0.1.1-b79ehxFpNAZoJlZ4IQiJiYMAMXZXlozqCL8KAR95YsE