Group:
Worldleaks
Discovered by ransomware.live: 2025-09-23
Estimated attack date:
2025-08-08
Country:
Description:
[AI generated] Washington Prime Group Inc is a real estate investment trust (REIT) that focuses on retail properties. It owns, manages, acquires, and develops retail properties in the US, including community shopping centers, mixed-use properties, and enclosed retail properties. These assets include well-known malls and lifestyle centers from coast to coast, particularly in the Midwest and Southeast.
DNS Records:
The following DNS records were found for the victim's domain.
- domain.operations@web.com
- wpgus-com.mail.protection.outlook.com.
- teamviewer-sso-verification=f739314532104f80bb7db85c758f771c
- xnqymbb5cznqhn4h3ny3ydt3mtp2fjcy
- 6hb11f3105nnp0kh4213z4lp66bnnc71
- Foxit-domain-verification=0ce77280e01cc3245fd93f5c535f76a9
- ZOOM_verify_4SGiWVwq0Z7QLrrAODQVbg
- v=spf1 mx ip4:52.3.237.34 ip4:52.55.191.64/26 ip4:207.211.30.242 ip4:207.211.30.221 ip4:18.133.136.188 ip4:205.139.110.221 ip4:205.139.110.242 ip6:2600:1f18:62ae:4200::/56 a:b.spf.service-now.com a:c.spf.service-now.com a:d.spf.service-now.com include:e2m" "a.net include:_spf.smtp.com include:spf.zoho.com include:transmail.net include:spf.nexuspayables.com include:spf.protection.outlook.com ~all
- apple-domain-verification=PlCxY5am8QAdOBQi
- docusign=5e14b32e-49d3-4da0-8371-e80b4b35df41
- box-domain-verification=6420c723da2ae0bc5c55c0c1e7cbb6a8d2bf3e548ffa8d44528ae7eca57a2331
- knowbe4-site-verification=ba4214baff2b3fb17335ef0db950ea67
Cloud / SaaS Services Detected
Apple
Box
Teamviewer
Zoho Campaigns
KnowBe4
DocuSign
ServiceNow
Zoom
Leak Screenshot:
Legal Disclaimer:
Ransomware.live does not engage in the acquisition, exfiltration, downloading, possession,
hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
This platform indexes only publicly visible information posted by ransomware operators and
open web sources without accessing or obtaining the underlying stolen content.
The service is provided to support public awareness, legitimate research, and cyber-resilience.
No stolen personal or confidential data is collected or distributed via this site.