Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Logo

Coemi Imóveis

coemi.com.br
Group Thegentlemen
Discovered 2026-11-05 06:09 UTC
Est. attack date 2026-11-02
Country BR
Sector
Agriculture and Food Production Education Energy & Utilities Financial Services Government & Defense Healthcare Hospitality Manufacturing Other Professional Services Retail & E-Commerce Technology Transportation
Duplicate Entry
This victim has been identified as a duplicate of another entry in our database. However, this may not always be the case: the same organization can be targeted multiple times by the same or different ransomware groups, which may result in separate legitimate entries. Search for related entries

Description:

coemi.com.br Coemi Imóveis is a Brazilian real estate agency founded in 1985 in Brasília with 41 years of experience in buying, selling, renting and property management across the Federal District and Goiás state. It operates three offices including its Asa Norte headquarters, an Águas Claras branch and a new Goiânia unit opened in 2023, with 18 to 33 employees and a portfolio of over 1,500 rental properties. The company is an official correspondent of Caixa Econômica Federal for mortgage financing and a member of the Rede Brasília de Imóveis network. Its services cover personalized sales consulting, rental management with differentiated payment options, property evaluation and legal support through to notarial closing. It runs a free online property valuation tool and actively publishes market guides for Brasília neighborhoods. Led by a single owner and registered under Simples Nacional as a small enterprise with R$78,800 in share capital.
Infostealer activity detected by HudsonRock

Compromised Employees: 0

Compromised Users: 2

Third Party Employee Credentials: 0

External Attack Surface: 2

Exposure Report
by ParanoidLab
28
Passwords
0 critical
1
Cookies
0 critical
Last queried 2026-11-05 06:09 UTC

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • No emails found.
MX Records
  • ALT3.ASPMX.L.GOOGLE.COM. Google Workspace
  • ALT4.ASPMX.L.GOOGLE.COM. Google Workspace
  • ALT1.ASPMX.L.GOOGLE.COM. Google Workspace
  • ALT2.ASPMX.L.GOOGLE.COM. Google Workspace
  • ASPMX.L.GOOGLE.COM. Google Workspace
TXT Records
  • v=spf1 include:_spf.google.com ~all
Cloud / SaaS Services Detected
Google Workspace

Other recent victims

Same group: Thegentlemen
Same sector: Retail & E-Commerce
Same country: Brazil

Legal Disclaimer: Ransomware.live does not engage in the acquisition, exfiltration, downloading, possession, hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data. This platform indexes only publicly visible information posted by ransomware operators and open web sources without accessing or obtaining the underlying stolen content. The service is provided to support public awareness, legitimate research, and cyber-resilience. No stolen personal or confidential data is collected or distributed via this site.