Taking out ConnectWise sites

General Discussion
1368
URL: Registrar: Registered on:
https://bxwcare.help/ Spaceship, Inc. 2025-09-27
https://zwacare.help/ Spaceship, Inc. 2025-09-27
https://lwycare.help/ Spaceship, Inc. 2025-09-27
https://rqwcare.help/ Spaceship, Inc. 2025-09-18
1369
URL: Registrar: Registered on:
https://helpzbt.top/ (redirect to dead SC site) NameSilo,LLC 2025-08-19
https://helpwhq.top/ (redirect to dead SC site) NameSilo, LLC 2025-10-03
https://helprfn.top/ (redirect to dead SC site) NameSilo, LLC 2025-10-03
https://bfxcare.top/ (redirect to dead SC site) NameSilo, LLC 2025-09-30
https://hwycare.top/ (redirect to dead SC site) NameSilo, LLC 2025-09-29
https://hnelive.help/ Spaceship, Inc. 2025-09-27
https://laicare.help/ Spaceship, Inc. 2025-09-27
https://bnylive.help/ Spaceship, Inc. 2025-09-27
https://ypclive.help/ Spaceship, Inc. 2025-09-27
https://ewslive.help/ Spaceship, Inc. 2025-09-27
https://qwslive.help/ Spaceship, Inc. 2025-09-27
https://uerlive.help/ Spaceship, Inc. 2025-09-18
https://hjalive.help/ Spaceship, Inc. 2025-09-18
https://urclive.help/ Spaceship, Inc. 2025-09-18
https://hnglive.help/ Spaceship, Inc. 2025-09-18
https://zsmlive.help/ Spaceship, Inc. 2025-09-18
https://guplive.help/ Spaceship, Inc. 2025-09-18
https://sdwlive.help/ Spaceship, Inc. 2025-09-18
https://rgdcare.top/ (redirect to dead SC site) NameSilo, LLC 2025-09-11
https://llecare.top/ (redirect to dead SC site) NameSilo, LLC 2025-09-10

Note: these redirect sites all lead to a dead SC site atm, but they sometimes change it to active sites (this is why I post/keep them and check them from time to time). I also don’t report the “redirect” sites.

1370

https://aqtcare.live/

https://we.cronnix.com/ (I’m pretty sure I’ve listed before but it’s still active)

https://ypclive.help/

https://rkdcare.live/

https://zppd.live/

https://kiycare.help/

1371

I’m going to put this here even though it’s not a ConnectWise App, it pretty much does the same thing as it can blank out your screen, first time I’ve run across this. SetMe Client

1372
URL: Registrar: Registered on:
https://yfr-bgh54.top/ NameSilo,LLC 2025-10-15
https://oe-rh8dfg.top/ NameSilo,LLC 2025-10-15
https://noi-jhlkj.top/ NameSilo,LLC 2025-10-15
https://xbg-jnjh8.top/ NameSilo,LLC 2025-10-15
https://kfg-7ui4s.top/ NameSilo,LLC 2025-10-15
https://vnt-ty56m.top/ NameSilo, LLC 2025-10-15
https://skmp36-nj.top/ NameSilo, LLC 2025-10-15
https://jhj8-2wer.top/ NameSilo,LLC 2025-10-15
https://i3kj-5poi.top/ NameSilo,LLC 2025-10-15
https://qctc48-are.live/ NameSilo, LLC 2025-10-15
https://ph-hun51.top/ NameSilo, LLC 2025-10-15
https://gxc-1v1bn.top/ NameSilo, LLC 2025-10-15
https://omt7-ht4v.top/ NameSilo,LLC 2025-10-15
https://ewe4-assd.top/ NameSilo, LLC 2025-10-15
https://dbsn-8ujm.top/ NameSilo, LLC 2025-10-15
https://clm3r-tsy.top/ NameSilo, LLC 2025-10-15
https://lbt-23bgp.top/ NameSilo,LLC 2025-10-15
https://jdbk6-pk5.top/ NameSilo, LLC 2025-10-15
https://int45-6gh.top/ NameSilo,LLC 2025-10-15
https://hyb67-ba9.top/ NameSilo,LLC 2025-10-15
https://ekmh51-h4.top/ NameSilo, LLC 2025-10-15
https://dk8uc-z4d.top/ NameSilo, LLC 2025-10-15
https://lyu-3cvb1.top/ NameSilo, LLC 2025-10-15
https://sup2.bkdx308.ru:7113/ unknown 2025-10-08
https://liveayl.top/ (redirect) NameSilo, LLC 2025-09-27
https://grplive.help/ Spaceship, Inc. 2025-09-27
https://pashelp.cc/ Spaceship, Inc. 2025-09-10

FYI: the weird named sites (mixed with numbers) all came from the “re-direct” sites I mentioned earlier (all created yesterday and they updated the redirect sites to these)

1373
URL: Registrar: Registered on:
https://rm7j-2zxc.top/ NameSilo, LLC 2025-10-15
https://wfd65-gv4.top/ NameSilo, LLC 2025-10-15
https://tbg-gft65.top/ NameSilo,LLC 2025-10-15
https://mbjh-65gy.top/ NameSilo, LLC 2025-10-15
https://careomt.top/ (redirect) NameSilo, LLC 2025-10-03
https://irjsol.top/ (redirect) NameSilo, LLC 2025-09-29
https://solydo.top/ (redirect) NameSilo, LLC 2025-09-20
1374

https://mtcecare.top/

https://waplive.top/

https://nhycare.help/

1375
URL: Registrar: Registered on:
https://ncuhelp.top/ Spaceship, Inc. 2025-10-15
https://okghelp.top/ Spaceship, Inc. 2025-10-15
https://helpskp.top/ (redirect) NameSilo, LLC 2025-10-15
1376

https://bpmjcare.live/

https://tfgecare.live/

https://dsdlive.top/?__cf_chl_tk=MO6yHB5e3J.LXs5w5wTQ6ze3bC6GBozjmsUzqYynHXs-1760737262-1.0.1.1-qF1iNwqh05Evj6W0nmTh5chJAtQ1dXOXPXgwjyzzdVw

1377
URL: Registrar: Registered on:
https://edrcare.top/ Spaceship, Inc. 2025-10-15
https://hghcare.top/ Spaceship, Inc. 2025-10-10
https://dsdlive.top/ Spaceship, Inc. 2025-10-10
1378
URL: Registrar: Registered on:
https://hgdcare.help/ Spaceship, Inc. 2025-09-27
1379

finally got my new tool running, it’s scanning for active domains based on the scammers naming patter, found a bunch

URL: Registrar: Registered on:
https://ppdcare.top/ Spaceship, Inc. 2025-10-16
https://hrclive.top/ Spaceship, Inc. 2025-10-15
https://dqulive.top/ (redirect) NameSilo, LLC 2025-10-15
https://ms3d-9mnb.top/ NameSilo, LLC 2025-10-15
https://fnssb9-gh.top/ NameSilo, LLC 2025-10-15
https://kddcare.top/ Spaceship, Inc. 2025-10-13
https://tgwcare.top/ Spaceship, Inc. 2025-10-10
https://serhelp.top/ Spaceship, Inc. 2025-10-10
https://wwshelp.top/ Spaceship, Inc. 2025-10-10
https://ksyhelp.top/ Spaceship, Inc. 2025-10-09
https://jnmcare.top/ Spaceship, Inc. 2025-10-08
https://upslive.top/ Spaceship, Inc. 2025-10-04
https://eurhelp.top/ Spaceship, Inc. 2025-10-04
https://mbtcare.top/ Spaceship, Inc. 2025-10-04
https://aotlive.top/ Spaceship, Inc. 2025-10-04
https://ycdhelp.top/ Spaceship, Inc. 2025-10-03
https://dflcare.top/ Spaceship, Inc. 2025-10-03
https://tgblive.top/ Spaceship, Inc. 2025-10-03
https://azplive.top/ Spaceship, Inc. 2025-10-03
https://gmwhelp.top/ Spaceship, Inc. 2025-10-03
https://omblive.top/ Spaceship, Inc. 2025-10-03
https://zshcare.top/ Spaceship, Inc. 2025-10-03
https://jiphelp.top/ Spaceship, Inc. 2025-10-03
https://frphelp.top/ Spaceship, Inc. 2025-10-03
https://ysmlive.top/ Spaceship, Inc. 2025-10-03
https://bpmlive.top/ Spaceship, Inc. 2025-10-03
https://jgpcare.top/ Spaceship, Inc. 2025-10-03
https://xsphelp.top/ Spaceship, Inc. 2025-10-03
https://piecare.top/ Spaceship, Inc. 2025-10-03
https://nbvlive.top/ Spaceship, Inc. 2025-10-02
https://tyrcare.top/ Spaceship, Inc. 2025-10-02
https://pmkhelp.top/ Spaceship, Inc. 2025-10-02
https://mkpcare.top/ Spaceship, Inc. 2025-10-02
https://mhslive.top/ Spaceship, Inc. 2025-10-02
https://epxlive.top/ Spaceship, Inc. 2025-10-02
https://bhelive.top/ Spaceship, Inc. 2025-10-02
https://stqlive.top/ Spaceship, Inc. 2025-10-02
https://yqwhelp.top/ Spaceship, Inc. 2025-10-02
https://tarcare.top/ Spaceship, Inc. 2025-10-02
https://bdslive.top/ Spaceship, Inc. 2025-10-02
https://carlive.top/ Spaceship, Inc. 2025-10-02
https://trylive.help/ Spaceship, Inc. 2025-09-18
https://nqzsol.top/ (redirect) NameSilo, LLC 2025-09-11
https://zivsol.top/ (redirect) NameSilo, LLC 2025-09-11
https://gaysol.top/ (redirect) NameSilo, LLC 2025-08-20
https://solvzs.top/ (redirect) NameSilo, LLC 2025-08-15
https://soliay.top/ (redirect) NameSilo, LLC 2025-08-15
https://gmslive.help/ NameSilo, LLC 2025-06-13
1380
URL: Registrar: Registered on:
https://fr-dk8mp.top/ NameSilo, LLC 2025-10-15
https://careixx.top/ (redirect) NameSilo, LLC 2025-09-11
1381

https://hjalive.help/

https://klhelp.com/ (Great job on the tool @dubloox3, good to see it working again) Also note the exe file is named (ConnectWiseControl.Client.exe) something that they have brought back into play..

1382
URL: Registrar: Registered on:
https://jfscare.live/ Spaceship, Inc. 2025-09-08
https://www.sp6help.top/ Gname.com Pte. Ltd. 2025-09-02
https://www.gk5help.top/ Gname.com Pte. Ltd. 2025-06-29
https://www.gh5help.top/ Gname.com Pte. Ltd. 2025-06-28
https://www.gd9help.top/ Gname.com Pte. Ltd. 2025-06-28
https://www.gp8help.top/ Gname.com Pte. Ltd. 2025-06-27
https://www.rthelp9.top/ Gname.com Pte. Ltd. 2025-06-27
https://www.dp9help.top/ Gname.com Pte. Ltd. 2025-06-27
https://www.kg5help.top/ Gname.com Pte. Ltd. 2025-06-27
https://www.vp9help.top/ Gname.com Pte. Ltd. 2025-06-26
https://www.fk8help.top/ Gname.com Pte. Ltd. 2025-06-26
https://www.sp4help.top/ Gname.com Pte. Ltd. 2025-06-26
https://www.g2phelp.top/ Gname.com Pte. Ltd. 2025-06-21
https://www.athelp7.top/ Gname.com Pte. Ltd. 2025-06-18
https://www.bd9help.top/ Gname.com Pte. Ltd. 2025-06-13
https://www.ap9help.top/ Gname.com Pte. Ltd. 2025-06-05
https://www.sk9help.top/ Gname.com Pte. Ltd. 2025-06-04
https://www.jp7help.top/ Gname.com Pte. Ltd. 2025-06-04
https://www.kdhelp4.top/ Gname.com Pte. Ltd. 2025-06-04
https://www.sp9help.top/ Gname.com Pte. Ltd. 2025-06-04
1383
URL: Registrar: Registered on:
https://solmjb.top/ NameSilo, LLC 2025-10-15
1384

https://qatlive.top/

https://xpnet.help/

https://epjcare.live/

https://hblive.support/

https://bhelive.top

https://prfcare.live/

1385
URL: Registrar: Registered on:
https://epphelp.top/ Spaceship, Inc. 2025-10-17
https://psslive.top/ Spaceship, Inc. 2025-10-17
https://hhrlive.top/ Spaceship, Inc. 2025-10-16
https://jppcare.top/ Spaceship, Inc. 2025-10-16
https://vvmcare.top/ Spaceship, Inc. 2025-10-16
https://zzblive.top/ Spaceship, Inc. 2025-10-16
https://ffgcare.top/ Spaceship, Inc. 2025-10-16
https://ppwlive.top/ Spaceship, Inc. 2025-10-16
https://epmlive.top/ Spaceship, Inc. 2025-10-16
https://rrkhelp.top/ Spaceship, Inc. 2025-10-16
https://qqplive.top/ Spaceship, Inc. 2025-10-16
https://lkkcare.top/ Spaceship, Inc. 2025-10-16
https://nhbhelp.top/ Spaceship, Inc. 2025-10-16
https://weelive.top/ Spaceship, Inc. 2025-10-16
https://ddfcare.top/ Spaceship, Inc. 2025-10-16
https://pldcare.top/ Spaceship, Inc. 2025-10-16
https://tplhelp.top/ Spaceship, Inc. 2025-10-16
https://jhpcare.top/ Spaceship, Inc. 2025-10-16
https://splcare.top/ Spaceship, Inc. 2025-10-16
1386

https://urclive.help/

https://hwpcare.live/

1387

https://tfccare.help/

https://nhycare.help/

https://edclive.help/

https://rfvlive.help/