planethomelending.com
planethomelending.com
Group: lockbit3
Discovered by ransomware.live: 2023-11-17
Estimated attack date: 2023-11-17
Description:
Founded in 2007, Planet Home Lending is a privately held mortgage lender with multiple business channels uniquely positioned to provide competitive products and services.
🕵️ Infostealer activity detected by HudsonRock
Compromised Employees: 0
Compromised Users: 17
Third Party Employee Credentials: 0
External Attack Surface: 5
DNS Records:
The following DNS records were found for the victim's domain.
WHOIS Emails
- abuse godaddy.com
MX Records
- mx2.hc4926-7.iphmx.com.
- mx1.hc4926-7.iphmx.com.
TXT Records
- amazonses:L6ajEGjVk0XZOqU4fQGdlYs+iz2WPzxy76yGPXdep/ZE=
- amazonses:t7RvLz1cbZVzUUq23+z6Bl+XiUWuUsZdeTGVOPiiL1o=
- d365mktkey=19i4ziws1Dou0xgxSCECqTxDxQ9zk1kMShiRSxkb0yUx
- d365mktkey=H8xSo7WxRUwkmS95W6NS5ktnxmyX3xQIFyhuupMAaZwx
- 77d86f3ffaa93dc1efbb6336cdbcee6637ddab988154eaf914
- activeprospect-domain-verification=SzfsFcDoIWuKgq/ro4+sjQ==
- atlassian-domain-verification=JIXlhdiMsHReVLflSco5ZrlUJ1on9IEKYZBXTqoHoEcaGHdmaaJyyqcI1klpRUoY
- v=spf1 exists:%{i}._i.%{d}._d.espf.agari.com include:%{d}.b3.spf-protect.agari.com -all
- docusign=7d78d815-d979-4199-bddb-7b1084d4b274
- onetrust-domain-verification=a4de53eba6b24e4ca6b8eb513faf959a
- apple-domain-verification=ERAJBYRSgYTrl3Mj
Cloud / SaaS Services Detected
Apple
Atlassian
Amazon SES/WorkMail
OneTrust
DocuSign
Leak Screenshot:
