Thread by @Gl0Agent

@usbank thanks for giving me the Dec-31-9999 @ 23:59 expiration date. Weird how I that exactly where the bios is limited from dating itself pass. @dagelf @danehrlich11 @rocco_castoro @dorkingbeauty1 @RekietaMedia

I made sure you have a good picture for the beacons you’re making calls to. Because you guys look to be having a tough time! I’m here for you. Tell me if you can see them. @CISAgov, does the @FDICgov have a team or are you all colossal failures?

hbr.org @HarvardBiz @HarvardHBS @Harvard ya’ll related? Because you all fit the bill for being really stupid.

@dorkingbeauty1 uat.edu > 104.196.248.208 > list-manage.com > back to one of your pulses from 8 days ago. @Google domain

Sry
104.196.248.208 > 23.193.148.183 > 165.227.228.184 (you)

@PHomeLending you’re on deck. If this was US Bank, an actual legitimate entity, let’s peak under your hood.

I wanted to make sure everyone knows where I sourced this. Let’s take the #1st url

This url links to (DO NOT CLICK THESE) 199.60.103.254 (inky.com <- also interesting...) which is PHISHING WEBSITES. (@dorkingbeauty1 pulse - Kent.edu-siblings list)

@PHomeLending @CFPB this is their first listed link on their Twitter page. Let’s look at link 2 - oooo a link shortener?!

@PHomeLending this is extremely odd. You set of ow{.}ly links are all obfuscated shorteners owned by domain registrar @LibyanSpider and the WHOIS is a Canadian (supposedly) named “Ryan Holmes”. More interesting is the fact I can’t find where it leads.

@PHomeLending @FDICgov @CFPB @dorkingbeauty1
@FBIMinneapolis this is the last certificate for Planet Home Lending. This looks like byte code injection.
#1 Link = Phishing. #2 Link = Byte code injected certificate (of authority??) lol #fraud smells...

@PHomeLending OH NO! This is classic! Link shorteners to a website with a revoked certificate?! AND YOU HAVE MALICIOUS ANON INJECTION?! I loved how you laughed when I said I was going to audit you (@dorkingbeauty1 planethomelending.com/privacy-policy/)
Why do you have link shorteners 4 this?!

4got image. @PHomeLending you are total frauds. You are a lending company that has domains registered by proxy and obfuscated link shorteners to your privacy policy. I’m calling the cops tomorrow. Now, @CFPB since @PHomeLending is fraudulent and charged with bribery, u?

@CFPBMilitary @CFPB you guys are unfucking believable. You are total frauds too. @amyklobuchar our @DeptVetAffairs VA home loans are being bought by fraudulent lenders who phish their customers and inject malicious byte code into their computers.

@rocco_castoro @strongSwanNet @danehrlich11 Google/Akamai/Amazon. Thx for the @securitytrails help btw. @FBI needs to investigate this. I don’t recognize this as legitimate because it isn’t.