Taking out ConnectWise sites

ermcare.help

04/09/25 tcpcare.help 172.67.213.204 Cloudflare/Namesilo

Same download

04/09/25 nzpcare.help 104.21.64.74 Cloudflare/Namesilo

same download

https://wzzhelp.top/ (full link)

blc.help20.top   Bell Canada scam

04/10/25 www.help27.top 172.67.159.197 Cloudflare/gname
04/10/25 web.updhelp.top 172.67.157.1 Cloudflare/gname

This backend was reported on 4/3 connected to www.helpf6.top, it’s changed IPs

04/03/25 www.helpf6.top 104.21.50.189 Cloudflare/gname
04/03/25 web.updhelp.top 104.21.48.239 Cloudflare/gname

https://ppwcare.help/ (code=99663)
https://pbrk.org/
https://wkkcare.help/

04/11/25 www.help56.top 188.114.96.3 Cloudflare/gname

https://pcre-43ert.top/Guest32xw.aspx/?Session=07e241b3-671e-4122-8aac-f1861f88312b

https://esdcare.help/

https://www.t3uhelp.top/ (code=33WI99Z)

04/14/25 www.t3uhelp.top 104.21.16.1 Cloudflare/gname
04/14/25 www.w4rhelp.top 104.21.96.1 Cloudflare/gname
04/14/25 web.aduhelp.top 172.67.208.237 Cloudflare/gname

snet400.online

https://goqhelp.top/ (code=w1bxy)
https://techsupport.screenconnect.com/?Session=1dc85cd9-66a7-4242-bb3f-0102dbdb4943
https://www.snet400.online (full url)

www.f6qhelp.top