Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are impacting your business

Logo intelliloan.com

Group: lockbit3

Discovered by ransomware.live: 2025-04-13

Estimated attack date: 2025-04-03

Country: US

Description:

Experience the Intelliloan difference! Get expert guidance on home loans, refinancing, and mortgage solutions. Learn how our innovative approach and dedicated team can help you achieve your financial goals. Announcements. Login. Make a payment. 833 9...


🕵️ Infostealer activity detected by HudsonRock

Compromised Employees: 0

Compromised Users: 2

Third Party Employee Credentials: 0


External Attack Surface: 1


Infostealer Distribution


DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • abuse godaddy.com
MX Records
  • antispam.lehmantech.com.
TXT Records
  • google-site-verification=GF9j1gt4vXDUVCopi0Jc22rEd53CvAQhFInCQU2SJe0
  • v=spf1 ip4:72.249.129.180 ip4:144.202.230.2 ip4:206.123.66.68 ip4:168.245.10.158 ip4:192.254.119.196 ip4:68.15.84.104 ip4:107.137.100.245 ip4:54.241.71.0 ip4:99.29.109.194 ip4:23.120.239.91 ip4:76.80.171.251 ip4:205.196.0.0/24 ip4:198.105.204.0/24 ip4:198" ".105.205.0/24 ip4:209.119.42.0/24 ip4:216.58.153.100 ip4:216.58.153.115 ip4:72.249.136.116 ip4:52.249.26.214 ip4:52.252.165.197 ip4:52.252.212.226 ip4:52.249.26.186 include:spf.protection.outlook.com include:spf.mandrillapp.com include:intelliloan-com.spf" ".smtp25.com include:sendgrid.net -all
  • ppe-f41f8411484c3d18e5ab
  • MS=ms36871942
  • OGHken1KIC2FZfTWS1vtug==
  • google-site-verification=IlUmRVKxddQ8ZBtvpozsCGPYdMoUx7ZOcejyoFhcUMg
Cloud / SaaS Services Detected
Microsoft 365 Mandrill SendGrid

Leak Screenshot:

Leak Screenshot