Contact us Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Eyemart Express

eyemartexpress.com

Discovered 2026-04-30 00:42 UTC
Est. attack date 2026-02-19
Country US

Description:

[AI generated] Eyemart Express is a United States-based retail optical chain specializing in prescription eyeglasses and contact lenses. Founded in 1990 and headquartered in Farmers Branch, Texas, the company operates hundreds of stores across the country. It offers eye exams, frames, and lenses with an emphasis on fast turnaround times. Eyemart Express competes in the optical retail industry alongside brands like LensCrafters and Visionworks.

Infostealer activity detected by HudsonRock

Compromised Employees: 0

Compromised Users: 386

Third Party Employee Credentials: 2


External Attack Surface: 43


DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • 2d2cca2d5274b2b3b205113d8946d29e83695931d9240f23bd07ae6612cb9624eyemartexpress.com.whoisproxy.org
  • 2d2cca2d5274b2b3b205113d8946d29ebb74b557f18a296bd111ac84d99013a6eyemartexpress.com.whoisproxy.org
  • 2d2cca2d5274b2b3b205113d8946d29ee14ac9f4deafdb6b2f2fe1de6934c858eyemartexpress.com.whoisproxy.org
  • trustandsafetysupport.aws.com
  • 2d2cca2d5274b2b3b205113d8946d29e397ce37ef0aa80fbfc464cbe9e373c58eyemartexpress.com.whoisproxy.org
MX Records
  • us-smtp-inbound-2.mimecast.com. Mimecast
  • us-smtp-inbound-1.mimecast.com. Mimecast
TXT Records
  • 1password-site-verification=C6JWNRL2MNB3BFDALMUMRRGJPU
  • 6bsg9bqg42g4x92kqfbfyh9bd9v5nq95
  • 98b9b8ef6c635c59db759150fd2d123c
  • MS=ms10393083
  • MS=ms47307001
  • _7pcgk8bl6jjegcv3a7r82kif9znq2yy
  • apple-domain-verification=PTvpAgNaND3NPGyX
  • google-site-verification=7ItXS8FKiOELJ2LinQuzGexFYESB-VM3MwTpLX-UHCM
  • google-site-verification=NINJI0myo6VBWY5dCaXz1Rte6qYS9-7MmAR1V9tckiU
  • google-site-verification=Xalp0zW5bMGhO6eF01UcFq44OWM2O0s_9JKViPGw8UY
  • have-i-been-pwned-verification=e27a5aa30967dbd01d5ea911d0dae066
  • k9n3zr46p9bfqqq8sv1gvh4x2n23zxp4
  • smartsheet-site-validation=XVpBTWgVBQFK2rqCDWMol9mqYJXHwX6F
  • smartsheet-site-validation=vXJwpWBwMKbTjUYXQOJcEXU3QyrYa16K
  • sp5ph6p006myw7s4n9g9sdj5tknjxvcs
  • twilio-domain-verification=9109ec6113187556e3521af164a2b9bc
  • v=spf1 redirect=5ss0qoto._spf._d.mim.ec
  • zscaler-verification-140678813-05112025-Ytfdsb5JBGY
Cloud / SaaS Services Detected
Apple Microsoft 365 Twilio Zscaler Mimecast Have I Been Pwned

Leak Screenshot:

Leak Screenshot