Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are impacting your business

Logo camaravalencia.com

Group: safepay

Discovered by ransomware.live: 2025-08-29

Estimated attack date: 2025-08-29

Country: ES

Description:

The Cámara de Valencia, officially known as the Chamber of Commerce, Industry, Services and Navigation of Valencia, was founded in …


🕵️ Infostealer activity detected by HudsonRock

Compromised Employees: 0

Compromised Users: 255

Third Party Employee Credentials: 0


External Attack Surface: 43


Infostealer Distribution


DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • abuse nicline.com
MX Records
  • mx.s2grupo.es.
  • camaravalencia-com.mail.protection.outlook.com.
TXT Records
  • spf2.0/pra ip4:165.22.194.33/32 include:_pmta2.antevenio.com ?all
  • linkedin-site-verification=a1f4f203-aa51-4afc-bb10-0289eb9165b0
  • v=spf1 ip4:34.175.186.33 ip4:165.22.194.33 ip4:185.99.186.150 ip4:91.232.71.161 ip4:91.232.71.164 ip4:195.76.142.179 ip4:213.96.10.28 ip4:213.139.0.0/19 ip4:62.93.160.0/19 ip4:185.79.130.29 ip4:62.93.189.161 include:_pmta2.antevenio.com include:_spf.jupit" "er.salesmanago.pl include:spf.protection.outlook.com include:sendgrid.net include:amazonses.com include:emsd1.com -all
  • 202007230848354rqcsrefnrp7lfvgd2eciqrefbhhn5o60iw7onk92fykzgqnxf
  • brevo-code:f7fc10b30511c3f810af0a19484f2615
  • amazonses:juCfI3MqQWlcKVzyzo2idQKnjskmHWk0b/dtzAApPbQ=
Cloud / SaaS Services Detected
Amazon SES/WorkMail SendGrid

Leak Screenshot:

Leak Screenshot