Taking out ConnectWise sites

oh yes
we call him coffee shop guy as he uses this wierd coffee shop template. He likes banning my IPs, but I have a basically infinite supply of those so its not a problem.

5 „Gefällt mir“

Looks like the scammer deleted that session, but I can still DOS the site (and exploit it in some other ways).

6 „Gefällt mir“

Finally got back to being able to take these servers down
ive added all the domains people have reported here to the target list

7 „Gefällt mir“

Yes, there’s probably only about 5 sellers who are running these cracked Screenconnect sites. One of them uses this fake coffee shop template for some reason.

4 „Gefällt mir“

to evade hosting provider and registrar policy

4 „Gefällt mir“

MFer live and scamming

https://s3.azz1back.site:8443/Login

5 „Gefällt mir“

mprofix.org- rip

3 „Gefällt mir“

vrhelp.info
57246

3 „Gefällt mir“

scomfix.org
wccare.info

7 „Gefällt mir“

avhelp.info

I can use an RNG to get a code if needed

3 „Gefällt mir“

https://ms4help.live/
36975

4 „Gefällt mir“

All of the domains people have dropped here have been added to the target list.

This has honestly just become cat and mouse with the scammers lmao, they are trying all sorts of things to evade the DOS bot.

The .org domains have been up for about a week but I should have a solution to take them down again soon.

7 „Gefällt mir“

@verumignis
nor.help3.org Code: 17994

Entering the website, https://883pw.nllobnpank1.loginlink2.site, will redirect you to some sort of fake coffee house website.

3 „Gefällt mir“

comp247.org
Code “16606”
image

Other link found: sup2.cpx247.ru, does nothing when clicked tho.

2 „Gefällt mir“

shelp1.org Code: 53172

3 „Gefällt mir“

ghelp1.org
g3639.passefund.info

6 „Gefällt mir“

Nice, all of these are new ones I haven’t seen before

Currently rewriting (again), this time with more ways to prevent evasion techniques, a few extra surprises for the scammers and lower RAM usage.

6 „Gefällt mir“

value247.us with code “51423”

3 „Gefällt mir“

support x4help.info

5 „Gefällt mir“

x4help.info is a proxy mask hiding lyuf1.top
value247.us is an iframe mask hiding bmck.us:8443

3 „Gefällt mir“