Group:
Worldleaks
Discovered by ransomware.live: 2026-03-23
Estimated attack date:
2026-03-23
Country:
Description:
[AI generated] Marion Military Institute (MMI), located in Marion, Alabama, is a two-year public military junior college. It is one of the five US military junior colleges that offer a direct commission into the US Army after a two-year course of study. Aside from military science and leadership education, MMI also offers a wide range of academic courses. Founded in 1842, it's the oldest military junior college in the United States.
DNS Records:
The following DNS records were found for the victim's domain.
- marionmilitary-edu.mail.protection.outlook.com.
- ZOOM_verify_fwdvxq-tSCGwNpaMOjYhTQ
- LeckItnb983UqwFqYYu8IDLQM9HETew2A+px6VWKV13nrwhs6cNJkAtDAJ/GpEdPtrcFctnZbE8J9hARtXUjOw==
- ca3-72cb6464ae1f4134aebb0943f2066956
- amazonses:kUXraU+mXVc3YOfsdKlexsOv8qeAwWHK+fRW6LNCu/E=
- 0ed1fe018a2eae23aa87ad48468fba83af1353024a
- google-site-verification=TJT_ifUuKfsiwYE4E_Uo0DFilQbdhpke5OI_H3p5mWw
- MS=C3F613327E46F1A322E5FA71397186CBB14C7A1F
- duo_sso_verification=1uZpYGLv1MuaNhfrNvvbqksxxpRngkrMbOkBpsmVaKCUcAzfTt9IdAEWsvPBO7vt
- MS=ms83276722
- v=spf1 include:spf-us.emailsignatures365.com include:spf.elluciancloud.com include:email-od.com include:_spf.salesforce.com include:spf.protection.outlook.com include:us._netblocks.mimecast.com include:_spf.mailgun.org ip4:198.105.13.131 ip4:162.209.88.57" " ip4:162.209.9.103 ip4:166.78.237.237 ip4:192.237.185.183 ip4:192.237.186.88 ip4:67.207.143.248 ip4:104.130.72.30 ip4:104.130.206.91 ip4:166.78.242.211 ip4:104.130.222.158 ip4:104.130.207.166 ip4:104.130.206.175 ip4:23.253.213.70 ip4:198.187.196.100 ip4:1" "98.187.196.130 ip4:159.183.195.16 ~all
Cloud / SaaS Services Detected
Amazon SES/WorkMail
Microsoft 365
Salesforce
Mailgun
Cisco Duo
Mimecast
Zoom
Leak Screenshot:
Legal Disclaimer:
Ransomware.live does not engage in the acquisition, exfiltration, downloading, possession,
hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
This platform indexes only publicly visible information posted by ransomware operators and
open web sources without accessing or obtaining the underlying stolen content.
The service is provided to support public awareness, legitimate research, and cyber-resilience.
No stolen personal or confidential data is collected or distributed via this site.