Taking out ConnectWise sites

https://www.ikcare.top/

URL: Registrar: Registered on:
https://bsupport.top/ NameSilo, LLC 2026-01-09
https://dshelp.shop/ (not sure) HOSTINGER operations, UAB 2025-12-28
https://hsupport.top/ Cosmotown 2025-12-21
https://asupport.top/ NameSilo, LLC 2025-12-12
https://noxsteam.net/ (not sure) PDR Ltd. d/b/a PublicDomainRegistry.com 2025-12-04
https://247help.do/ (not sure) Registrar NIC .DO (midominio.do) 2025-10-31

ikcare.top from @bernd gave some new hashes (thanks). Not sure if the new ones are scam related, but will keep an eye on it.

this one for sure lol hsupport.top

this is an interesting newer SC theme “ultradark” and tld “.do” (247help.do) no other sites tho

https://fvgcare.top/

https://www.rdgk9658.top/

URL: Registrar: Registered on:
https://www.bg5help.top/ Gname 2026-01-12
https://www.ppl85help.top/ Gname 2026-01-06
https://jrbncare.top/ (down already?) Spaceship, Inc. 2025-12-17
https://fglcare.top/ Spaceship, Inc. 2025-12-11
https://tybcare.top/ Spaceship, Inc. 2025-12-11
https://yubcare.top/ Spaceship, Inc. 2025-12-11
https://ernlive.top/ Spaceship, Inc. 2025-12-11
https://humhelp.top/ Spaceship, Inc. 2025-12-08
https://tcmcare.top/ Spaceship, Inc. 2025-12-08
https://aplive.support/ Spaceship, Inc. 2025-09-06

weird one:

URL: Registrar: Registered on:
https://bgjoin.top/ HOSTINGER operations, UAB 2025-12-09

we had this one before but with www. mandatory (w/o it didn’t work)
with www. it’s down now and w/o it’s active again (will have to dig into this later)

most sites work with and w/o like most of the regular sites on the net (except for the “Susan” pages - the lady with the headset), these only work with www.

https://camhelp.top/

URL: Registrar: Registered on:
https://www.kg9help.one/ Gname 2026-01-12
https://www.dijoin.top/ Spaceship, Inc. 2026-01-09
https://www.wicare.top/ Spaceship, Inc. 2026-01-07
https://uivcare.top/ Spaceship, Inc. 2025-12-11
https://gtpcare.top/ Spaceship, Inc. 2025-12-08
https://kpjoin.top/ HOSTINGER operations, UAB 2025-11-15

the “.one” TLD is interesting, let’s see if they use it more often (Dinky/FGM sent it to me)

https://www.kg9help.one/

https://zsehelp.top/

https://we.dojoin.top/
https://ordhelp.top/

URL: Registrar: Registered on:
https://www.bg9help.one/ Gname 2026-01-12
https://www.mz7help.site/ Gname 2026-01-09
https://hyvtcare.live/ Spaceship, Inc. 2025-09-23
URL: Registrar: Registered on:
https://www.wd7help.site/ Gname.com Pte. Ltd. 2026-01-09
https://www.wq7help.site/ Gname.com Pte. Ltd. 2026-01-09

https://login.cppllog2356.top/guest
https://helpme160.org/

URL: Registrar: Registered on:
https://www.kmd54.one/ Gname 2026-01-15
https://www.kdm24.one/ Gname 2026-01-15
https://www.orderhistory77.top/ Gname 2025-11-28
URL: Registrar: Registered on:
https://www.mfe24.top/ Gname.com Pte. Ltd. 2025-12-11
https://atbhu-25.top/ NameSilo, LLC 2025-06-05
URL: Registrar: Registered on:
https://ryulive.top/ Spaceship, Inc. 2026-01-15
https://hscare.top/ HOSTINGER operations, UAB 2026-01-13
https://ikcare.top/ (down already) HOSTINGER operations, UAB 2026-01-08
https://ghkhelp.top/ Spaceship, Inc. 2025-12-11
https://hjkcare.top/ Spaceship, Inc. 2025-12-11
https://dflhelp.top/ Spaceship, Inc. 2025-12-11
https://sdzlive.top/ Spaceship, Inc. 2025-12-11
https://gejoin.top/ HOSTINGER operations, UAB 2025-12-09
https://zpmcare.top/ Spaceship, Inc. 2025-12-08
https://jtslive.top/ Spaceship, Inc. 2025-12-08
https://krnhelp.top/ Spaceship, Inc. 2025-12-08
https://exbhelp.top/ Spaceship, Inc. 2025-12-08
https://cnphelp.top/ Spaceship, Inc. 2025-12-08

https://www.kmd54.one/

https://btplive.top/

https://fvshelp.top/
https://ckcare.top/

URL: Registrar: Registered on:
https://www.tdz98help2.top/ Gname.com Pte. Ltd. 2026-01-20
https://www.hku85help.one/ Gname.com Pte. Ltd. 2026-01-20
https://vfrhelp.top/ Spaceship, Inc. 2025-12-08

https://fvshelp.top/ (still in use)
https://www.gs24help.top/ (again not new, but still active and in use by paypal scammers from New Delhi)