Taking out ConnectWise sites

General Discussion
1228

https://carefcc.top/?\__cf_chl_tk=d4cksjds05iVfMOFUn1GKV_UPzNOx_mToWiF7YfFrkE-1755092591-1.0.1.1-.4g0vkG89qgBhU3Z_ZtS.tXByGK2tGrVLhbZ3rHAjdo

https://bapcare.top/

https://llclive.top/

1229
URL: Registrar: Registered on:
https://uvgtinfo.help/ NameSilo, LLC 2025-08-13
https://vtbginfo.help/ NameSilo, LLC 2025-08-13
https://wdkpinfo.help/ NameSilo, LLC 2025-08-13
https://xkpuinfo.help/ NameSilo, LLC 2025-08-13
https://carefea.top/ NameSilo, LLC 2025-08-12

3 interesting sites below: fake paypal landing page with an anydesk installer and links to 2 SC installer sites (www.cancelmyorder4.top + www.updatesecurity6.top)

URL: Registrar: Registered on:
https://paypal2factor.com/ Name.com, Inc. 2025-07-31
https://gettwofactor.com/ Name.com, Inc. 2025-07-31
https://updatesecurity.net/ Name.com, Inc. 2025-07-31

I added them to the script to see if they create new sites like that

1230
URL: Registrar: Registered on:
https://cywcare.top/ NameSilo,LLC 2025-08-12
https://ospsol.top/ NameSilo, LLC 2025-08-12
https://swthelp.top/ NameSilo,LLC 2025-08-12
https://mopcare.top/ NameSilo, LLC 2025-08-12
https://livebii.top/ (only redirect) NameSilo, LLC 2025-08-11
https://helppdy.top/ (only redirect) NameSilo, LLC 2025-08-11
https://solfsr.top/ NameSilo, LLC 2025-08-07
https://rujhelp.top/ (only redirect) NameSilo, LLC 2025-08-07
1231

https://yeslive.top/?__cf_chl_rt_tk=HzMcR.xUm90HVBfweu0.EoH5M6IOdQWQpUhw8j3b3rg-1755195251-1.0.1.1-jACS3l2ICkhaLbJtvgk8Cpn6G2J7QOAQ4pa2kUjHn3Q

https://gmkr.cc:8443/

https://h8varw.top/

1232
URL: Registrar: Registered on:
https://ytphelp.top/ (only redirecting) NameSilo,LLC 2025-08-13
https://livepob.top/ (only redirecting) NameSilo,LLC 2025-08-12
https://careewt.top/ (only redirecting) NameSilo,LLC 2025-08-12
https://wzglive.top/ NameSilo,LLC 2025-08-07
https://ojysol.top/ NameSilo,LLC 2025-08-12
https://pxrcare.top NameSilo,LLC 2025-08-12
1233

maybe some reposts, I saw that some of the URLs are just re-directing (so I changed the script and will upload it again on the forum)

URL: Registrar: Registered on:
https://ucmhelp.top/ NameSilo,LLC 2025-08-12
https://lfrcare.top/ NameSilo, LLC 2025-08-12
https://pxrcare.top/ NameSilo, LLC 2025-08-12
https://pxrcare.top/ NameSilo, LLC 2025-08-12
https://mopcare.top/ NameSilo, LLC 2025-08-12
https://mopcare.top/ NameSilo, LLC 2025-08-12
https://mjklive.top/ NameSilo, LLC 2025-08-12
https://carevig.top/ NameSilo, LLC 2025-08-05
https://hsdlive.top/ NameSilo,LLC 2025-07-22
https://cdsol.help/ NameSilo, LLC 2025-06-02
https://www.pl4help.top/ Gname.com Pte. Ltd. 2025-05-30
https://www.s3phelp.top/ Gname.com Pte. Ltd. 2025-04-30
1234

4hhelp.top

1235

https://wdkpinfo.help/

https://bvlhelp.top/?__cf_chl_rt_tk=o0dnnx78laGGbY.F6zbVMS_vIhC1RPBqMWRIDwJp9mY-1755291502-1.0.1.1-567fqVtY7PgeS9Q_PzHmv2wE2wPR.825MINc.g3aVVQ

https://ospsol.top/?\__cf_chl_rt_tk=pYhs6p44qSD252df4o7fF8fn8vmOMDNAQ_hk7DIZ50w-1755292778-1.0.1.1-HEt.cUcrBbUYVLJprORCV0dkqeXmUR5F7rl6S8uBQng

1236
URL: Registrar: Registered on:
https://wzucare.top/ NameSilo,LLC 2025-08-11
https://nzw08-gf.top/ NameSilo,LLC 2025-08-11
https://www.pplhelp24.top/ Gname Pte. Ltd. 2025-08-09
1237
URL: Registrar: Registered on:
https://h8hju-uy5.top/ NameSilo, LLC 2025-08-16
https://solvee.top/ (redirect) NameSilo, LLC 2025-08-15
https://soljph.top/ NameSilo, LLC 2025-08-15
https://solndy.top/ NameSilo,LLC 2025-08-15
https://hnqcare.top/ NameSilo, LLC 2025-08-15
https://yielive.top/ NameSilo,LLC 2025-08-15
https://pgmhelp.top/ NameSilo, LLC 2025-08-15
https://rtsol.help/ NameSilo, LLC 2025-06-02
1238
URL: Registrar: Registered on:
https://krqcare.top/ NameSilo, LLC 2025-08-16
https://carefst.top/ NameSilo, LLC 2025-08-15
https://kwalive.top/ NameSilo, LLC 2025-08-15
https://soldxh.top/ NameSilo, LLC 2025-08-15
https://solwzi.top/ NameSilo, LLC 2025-08-15
1239

https://ilglive.top/ (popup scammers using this site)

https://caregwy.top/?__cf_chl_tk=K9Y_lbAgxw7VanGIY0VqqChYsLdRtxebwZ8ot5Hh1oo-1755542262-1.0.1.1-e7ymNPnsJobc6KbeyF795y.9myQlbZ8OI4XCb83_dZA

https://rtbhelp.top/

1240
URL: Registrar: Registered on:
https://ysgsol.top/ NameSilo,LLC 2025-08-09
https://rxhlp.help/ (interesting ā€œForm buttonā€, new to me) NameSilo, LLC 2025-07-22
https://4hlpu.help/ (interesting ā€œForm buttonā€, new to me) NameSilo, LLC 2025-07-22
https://ppl214.pages.dev/ CloudFlare, Inc. 2020-09-02
https://ppl215.pages.dev/ CloudFlare, Inc. 2020-09-02

nice to see how fast they loose their sites, the count is somewhere around 500 :sweat_smile:

1241

https://helpblt.top/

https://mxwsol.top/

https://solauj.top/

1242

for sure!

1243

some interesting new background images, luckily the hash for the theme is still the same

1244
URL: Registrar: Registered on:
https://fzulive.top/ NameSilo, LLC 2025-08-19
https://helpvae.top/ NameSilo, LLC 2025-08-19
https://solauj.top/ NameSilo, LLC 2025-08-19
1245

Yeah, I thought the same, slight variation in colors.

1246

https://www.kw9help.top/

http://www.p8khelp.top/

https://www.gh2hehp.top/

all of these sites are down or not working for me..

1247

the first 3 seem to be down on the host side (either suspended or they removed them on their own)

URL: Registrar: Registered on:
https://oozhelp.top/ NameSilo, LLC 2025-08-19
https://dkmhelp.top/ NameSilo, LLC 2025-08-19
https://helpxhj.top/ NameSilo, LLC 2025-08-19
https://oplive.help/ NameSilo, LLC 2025-07-07