sotaconstruction.com
sotaconstruction.com
Group: qilin
Discovered by ransomware.live: 2025-08-07
Estimated attack date: 2025-08-07
Country:
Description:
Sota Construction Services is a leading provider of comprehensive and cost-effective construction services specializing in commercial and residential construction. The company emphasizes environmentally friendly construction methods and has b ...
🕵️ Infostealer activity detected by HudsonRock
Compromised Employees: 2
Compromised Users: 0
Third Party Employee Credentials: 2
External Attack Surface: 1
Infostealer Distribution
DNS Records:
The following DNS records were found for the victim's domain.
WHOIS Emails
- abuse godaddy.com
MX Records
- mx2-us1.ppe-hosted.com.
- mx1-us1.ppe-hosted.com.
TXT Records
- v=spf1 a mx ip4:168.245.113.179 ip4:168.245.125.157 include:spf.protection.outlook.com include:sendgrid.net a:dispatch-us.ppe-hosted.com ~all
- MS=ms81957790
- ppe-190494117868930659d6
- ppe-876c042d5a6884ab7ffe
- spf1 ip4:54.225.154.170 ip4:54.83.61.140 ip4:23.21.104.248 ip4:54.225.249.35 ip4:23.23.185.116 ip4:23.21.139.101 ip4:184.72.220.252 ip4:54.227.253.218 -all
- MS=E662CA7308E57165311829D1E1B0A947E8C7B9BE
- D8953455
Cloud / SaaS Services Detected
Microsoft 365
SendGrid
Proofpoint Essentials
Leak Screenshot:
