Skip to content
Threat Feed
Subscribe
critical threat updated

Qilin Ransomware Claims New Victim in Agriculture and Food Production Sector

The Qilin ransomware group, active since July 2022 and utilizing Golang, has claimed a new victim, Danone (International Delights) in the US Agriculture and Food Production sector, employing double extortion tactics involving data encryption and threatened data release.

CVE search metadata

CVE search record: CVE-2026-24061. Severity: critical. CVSS: 9.8. EPSS: 97.88%. KEV: no. Product: www.acosol.es, vCenter, ESXi, Cloud Sensor AV, VMware vCenter, VMware ESXi, Carbon Black Cloud Sensor AV, Toshiba power management driver, NetSupport, ScreenConnect, Zemana Anti-Rootkit driver, www.nuevaschool.org, Apache bRPC, FortiOS, FortiProxy, SmarterMail, Telnetd in GNU Inetutils, WatchGuard Fireware OS, Check Point VPN Remote Access and Mobile Access, Veeam Backup & Replication, SolarWinds Web Help Desk, Zemana AntiLogger, VPN Remote Access and Mobile Access, Backup & Replication, www.rehavital.de, EasyUpload.io, MEGA, VPN Remote Access, Mobile Access, www.triton.com.pe, www.api.com.ph, Telnetd, Fireware OS, Web Help Desk, AntiLogger, vCenters, FortiOS & FortiProxy, Contacto Garantido, Check Point VPN Remote Access, Check Point Mobile Access, www.wilberts.com, Cloud NGFW, GNU Inetutils, bRPC, higen.co.kr, winchesterky.com, bwrightdrywall.com. Brief: Qilin Ransomware Claims New Victim in Agriculture and Food Production Sector. Brief link: https://feed.craftedsignal.io/briefs/2026-07-qilin-ransomware/

CVE search record: CVE-2025-9242. Severity: critical. CVSS: 9.8. EPSS: 91.30%. KEV: no. Product: www.acosol.es, vCenter, ESXi, Cloud Sensor AV, VMware vCenter, VMware ESXi, Carbon Black Cloud Sensor AV, Toshiba power management driver, NetSupport, ScreenConnect, Zemana Anti-Rootkit driver, www.nuevaschool.org, Apache bRPC, FortiOS, FortiProxy, SmarterMail, Telnetd in GNU Inetutils, WatchGuard Fireware OS, Check Point VPN Remote Access and Mobile Access, Veeam Backup & Replication, SolarWinds Web Help Desk, Zemana AntiLogger, VPN Remote Access and Mobile Access, Backup & Replication, www.rehavital.de, EasyUpload.io, MEGA, VPN Remote Access, Mobile Access, www.triton.com.pe, www.api.com.ph, Telnetd, Fireware OS, Web Help Desk, AntiLogger, vCenters, FortiOS & FortiProxy, Contacto Garantido, Check Point VPN Remote Access, Check Point Mobile Access, www.wilberts.com, Cloud NGFW, GNU Inetutils, bRPC, higen.co.kr, winchesterky.com, bwrightdrywall.com. Brief: Qilin Ransomware Claims New Victim in Agriculture and Food Production Sector. Brief link: https://feed.craftedsignal.io/briefs/2026-07-qilin-ransomware/

CVE search record: CVE-2026-50751. Severity: critical. CVSS: 9.3. EPSS: 83.77%. KEV: no. Product: www.acosol.es, vCenter, ESXi, Cloud Sensor AV, VMware vCenter, VMware ESXi, Carbon Black Cloud Sensor AV, Toshiba power management driver, NetSupport, ScreenConnect, Zemana Anti-Rootkit driver, www.nuevaschool.org, Apache bRPC, FortiOS, FortiProxy, SmarterMail, Telnetd in GNU Inetutils, WatchGuard Fireware OS, Check Point VPN Remote Access and Mobile Access, Veeam Backup & Replication, SolarWinds Web Help Desk, Zemana AntiLogger, VPN Remote Access and Mobile Access, Backup & Replication, www.rehavital.de, EasyUpload.io, MEGA, VPN Remote Access, Mobile Access, www.triton.com.pe, www.api.com.ph, Telnetd, Fireware OS, Web Help Desk, AntiLogger, vCenters, FortiOS & FortiProxy, Contacto Garantido, Check Point VPN Remote Access, Check Point Mobile Access, www.wilberts.com, Cloud NGFW, GNU Inetutils, bRPC, higen.co.kr, winchesterky.com, bwrightdrywall.com. Brief: Qilin Ransomware Claims New Victim in Agriculture and Food Production Sector. Brief link: https://feed.craftedsignal.io/briefs/2026-07-qilin-ransomware/

CVE search record: CVE-2026-0257. Severity: critical. CVSS: 9.1. EPSS: 93.91%. KEV: no. Product: www.acosol.es, vCenter, ESXi, Cloud Sensor AV, VMware vCenter, VMware ESXi, Carbon Black Cloud Sensor AV, Toshiba power management driver, NetSupport, ScreenConnect, Zemana Anti-Rootkit driver, www.nuevaschool.org, Apache bRPC, FortiOS, FortiProxy, SmarterMail, Telnetd in GNU Inetutils, WatchGuard Fireware OS, Check Point VPN Remote Access and Mobile Access, Veeam Backup & Replication, SolarWinds Web Help Desk, Zemana AntiLogger, VPN Remote Access and Mobile Access, Backup & Replication, www.rehavital.de, EasyUpload.io, MEGA, VPN Remote Access, Mobile Access, www.triton.com.pe, www.api.com.ph, Telnetd, Fireware OS, Web Help Desk, AntiLogger, vCenters, FortiOS & FortiProxy, Contacto Garantido, Check Point VPN Remote Access, Check Point Mobile Access, www.wilberts.com, Cloud NGFW, GNU Inetutils, bRPC, higen.co.kr, winchesterky.com, bwrightdrywall.com. Brief: Qilin Ransomware Claims New Victim in Agriculture and Food Production Sector. Brief link: https://feed.craftedsignal.io/briefs/2026-07-qilin-ransomware/

CVE search record: CVE-2025-40554. Severity: critical. CVSS: 9.8. EPSS: 58.45%. KEV: no. Product: www.acosol.es, vCenter, ESXi, Cloud Sensor AV, VMware vCenter, VMware ESXi, Carbon Black Cloud Sensor AV, Toshiba power management driver, NetSupport, ScreenConnect, Zemana Anti-Rootkit driver, www.nuevaschool.org, Apache bRPC, FortiOS, FortiProxy, SmarterMail, Telnetd in GNU Inetutils, WatchGuard Fireware OS, Check Point VPN Remote Access and Mobile Access, Veeam Backup & Replication, SolarWinds Web Help Desk, Zemana AntiLogger, VPN Remote Access and Mobile Access, Backup & Replication, www.rehavital.de, EasyUpload.io, MEGA, VPN Remote Access, Mobile Access, www.triton.com.pe, www.api.com.ph, Telnetd, Fireware OS, Web Help Desk, AntiLogger, vCenters, FortiOS & FortiProxy, Contacto Garantido, Check Point VPN Remote Access, Check Point Mobile Access, www.wilberts.com, Cloud NGFW, GNU Inetutils, bRPC, higen.co.kr, winchesterky.com, bwrightdrywall.com. Brief: Qilin Ransomware Claims New Victim in Agriculture and Food Production Sector. Brief link: https://feed.craftedsignal.io/briefs/2026-07-qilin-ransomware/

What's new

The Qilin ransomware group, a highly active threat actor first observed in July 2022, continues its double extortion operations, with a recent claim against Danone (International Delights), a US-based company in the Agriculture and Food Production sector. Qilin ransomware is written in Golang, offering multiple encryption modes controlled by the operators, and its campaigns typically involve both data encryption and the threat of public release of stolen sensitive information if a ransom is not paid. The group has accumulated over 2000 victims across various industries, including manufacturing, business services, technology, and healthcare, primarily targeting entities in the United States. This ongoing activity highlights Qilin's persistent threat to critical infrastructure and diverse commercial enterprises globally.

Attack Chain

  1. Initial Access: Attackers gain entry through various methods, including the exploitation of public-facing applications, spearphishing via email, or leveraging valid but compromised accounts (e.g., T1566, T1190, T1078).
  2. Execution: Qilin operators execute malicious code using scripting interpreters like PowerShell or Unix Shell, or by deploying malicious system services (e.g., T1059.001, T1059.004, T1569.002).
  3. Persistence & Privilege Escalation: Persistence is established via scheduled tasks or boot/logon autostart execution. Privilege escalation is achieved through exploitation of vulnerabilities or techniques like OS credential dumping (e.g., T1053.005, T1547, T1068, T1003.001).
  4. Defense Evasion: The group employs techniques such as obfuscated files, modifying or disabling security tools, and impairing system defenses like firewalls to maintain access and avoid detection (e.g., T1027, T1562, T1562.004).
  5. Discovery & Lateral Movement: Attackers conduct extensive network reconnaissance, querying registries, sniffing network traffic, and using remote services (e.g., SMB/Windows Admin Shares, RDP) to identify high-value targets and move laterally across the compromised network (e.g., T1012, T1046, T1021.001, T1021.002).
  6. Collection & Exfiltration: Sensitive data is collected and often archived using utilities before being exfiltrated over alternative network mediums or to cloud storage services (e.g., T1560.001, T1041, T1567.002).
  7. Command and Control: Communication with C2 infrastructure is maintained through various methods, including obfuscated data and tunneling over common application layer protocols like web protocols (e.g., T1001, T1071.001, T1572).
  8. Impact: The final stage involves encrypting victim data, inhibiting system recovery mechanisms, and sometimes wiping disks to maximize disruption and coerce ransom payment (e.g., T1486, T1490, T1488, T1488.001).

Impact

The Qilin ransomware group's attacks result in severe operational disruption, data loss due to encryption, and potential public exposure of sensitive information through their double extortion model. With over 2000 victims reported since 2022, including a recent target in the US Agriculture and Food Production sector, the scope of their impact is significant and spans diverse industries like manufacturing, business services, technology, and healthcare. Successful attacks lead to direct financial losses from ransom demands, costs associated with incident response and recovery, and severe reputational damage. The loss of critical business data and systems can halt operations for extended periods, impacting supply chains and essential services.

Recommendation

  • Implement endpoint detection and response (EDR) solutions to detect and block malicious hashes listed in the IOCs.
  • Block connections to the malicious IP addresses and domains listed in the IOC table at the network perimeter firewall and DNS resolver.
  • Deploy and tune endpoint security rules, such as the Detect Qilin Ransomware Hashes rule, to identify and quarantine known Qilin ransomware samples.
  • Implement and continuously monitor the Detect Qilin C2 Network Connections rule to identify and alert on suspicious outbound network activity to known Qilin infrastructure.
  • Enable comprehensive logging for process creation, network connections, and file events on all endpoints to provide visibility for the detection rules and facilitate incident response.
  • Review and enforce strong password policies and multi-factor authentication (MFA) to mitigate initial access attempts via valid accounts (ATT&CK T1078).
  • Regularly patch and update all public-facing applications and systems to prevent exploitation of vulnerabilities (ATT&CK T1190).

Detection coverage 2

Detect Qilin Ransomware Hashes

high

Detects known Qilin ransomware samples by their MD5 hashes, indicative of malware presence on the system.

sigma tactics: impact techniques: T1486 sources: file_event, windows

Detect Qilin C2 Network Connections

high

Detects outbound network connections to known Qilin ransomware command-and-control (C2) infrastructure IP addresses or unusual FTP connections for data exfiltration.

sigma tactics: command_and_control, exfiltration techniques: T1041, T1071.001 sources: network_connection, windows

Detection queries are available on the platform. Get full rules →

Indicators of compromise

42

domain

55

hash_md5

5

ip

76

url

TypeValue
domainwww.idelights.com
urlhttp://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/blog?uuid=2a85afa5-7c66-4fe2-a552-df3f6954cb9c
domainozsxj4hwxub7gio347ac7tyqqozvfioty37skqilzo2oqfs4cw2mgtyd.onion
domainkbsqoivihgdmwczmxkbovk7ss2dcynitwhhfu5yw725dboqo5kthfaad.onion
domainijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion
domainji57fr53anp7wb44tbbnp72qcgbhqywy4jmbncawdcrejj5amuvh3zqd.onion
hash_md508a2405cd32f044a69737e77454ee2da
hash_md50d68a310f4265821900249bec89364c2
hash_md511d795baafa44b73766e850d13b8e254
hash_md5144183a4217ae0914ba0c865858d07cd
hash_md519ff6488a259d750ec18902fe75a713b
hash_md51bde76f3197123dcc2ecd0bfef567484
hash_md51c4bea81c0da22badd9b7eab574c51cd
hash_md52020979e080d7ac9c0403172573c7de8
hash_md524a8fcd08d9e40d32929b57de9b15385
hash_md52bb209ccfc5103eccab523c875050cfa
hash_md52f76a29d4e4292d7f29a29345717812c
hash_md53158a3849ea2695d6ec5aea6512fd030
hash_md5348b0ce6af4698061678c8e92b4b2675
hash_md537155f0bca29ccd6b6d4f5b2bc42eb4d
hash_md53b10127e65fa3e215d21e0a2e7fd32be
hash_md5417ad60624345ef85e648038e18902ab
hash_md5420a2c53386678396f972f09cc7f3a5c
hash_md54a3f22021e4415e8211633fb3735a046
hash_md54ea8adecc5bd45a76cc61430c560924f
hash_md553c8a4f0497929de4a5039b2c14bf426
hash_md5575b26c1cc06609722f98e2beaed6a8a
hash_md55862f9fc9c9a0d766eba29eb4945f619
hash_md559d756280b06cf113ca43abc0050edd5
hash_md55cffa3126b9effc279d32b2cf4ef2278
hash_md564a590760fdbb84356544cc90ac3d50f
hash_md5670fe8faaede4e2e033311fb662d2a4a
hash_md56f893b1cc5cf534c59eabe932c1bf21e
hash_md56fc6164b3a08669992acad3764fb1922
hash_md5826a8e8c05983aa3a884d7abcfa473ac
hash_md588630916b0c6633ca28c8896416a93ee
hash_md588bb86494cb9411a9692f9c8e67ed32c
hash_md58ca5c9745e8a0e18167a9b932821645a
hash_md5964c13b68dc6b6b918b66a9a10469d2a
hash_md5996c394d0f6d6967df9542c52f6f4661
hash_md59befad1d56d2bd8195813aea1f37f921
hash_md59ea321b6a0f069caab7092cfe1cbbde0
hash_md59f510626c7327a7c2328bc5131726638
hash_md5a6302fdb63e2244c1246a73a7d65d09e
hash_md5a7ab0969bf6641cd0c7228ae95f6d217
hash_md5a7e7d00d531cb7ca27d0f3bee448573f
hash_md5ab05a1925fee8334a2114811d5283364
hash_md5b04e8ee43aba85fa5c585b9335c953c2
hash_md5b4a6152514919a637c22a58bea316fc7
hash_md5bed0f34673cc93560c17e3ab04ea5d19
hash_md5d1c331c17ddd4abe0d53755461c1ec9a
hash_md5d309e3d77ed6a336eb3ad263ddf9db90
hash_md5d6e7547ad7dfd1fbc62e8282aebcc391
hash_md5dd42c3e017889c107a81da78d87dc8af
hash_md5e01776ec67b9f1ae780c3e24ecc4bf06
hash_md5e4c1add9f7606e3fa57976b908b4b375
hash_md5ea1f8794c73b26724314e5356f1f4128
hash_md5f588802958c35fe18eb87bc36651a3d1
hash_md5f982da00c547913fd0ae7d0da0fc77e7
hash_md5fdc6848dad660414bed9ad1b381cf6e3
ip176.113.115.209
ip176.113.115.97
ip188.119.66.189
ip31.41.244.100
ip85.209.11.49
domainwww.acosol.es
urlhttp://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/blog?uuid=06db273a-dad1-49d1-98ea-f59c947de0b6
domainwww.cafar.org.ar
urlhttp://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/blog?uuid=534f0ef4-d3fb-4650-ae42-445c281986c6
domainwww.powderriverheating.com
domainwww.martorani.com
urlhttp://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/blog?uuid=7e150d05-bd34-404d-8824-a10358840d67
urlhttp://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/blog?uuid=cddad5ee-72f3-48fd-9310-4858484d5f59
domainwww.akpreparedness.com
urlhttp://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/blog?uuid=ce1a0a64-9560-4bbf-8489-b0af28ec8fad
domainwww.sicc-srl.com
domainwww.kldlabs.com
domainwww.armara.fr
urlhttp://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/
domainwww.nuevaschool.org
urlhttp://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/blog?uuid=f5d63ec4-a191-4de4-a6d1-f0fa52fba59e
domainwww.cityambu.com
urlhttp://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/blog?uuid=9a5b2562-d3a3-4b7a-b2fa-2624534ed258
domainwww.famesa.com.pe
urlhttp://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/blog?uuid=319f4978-5d69-49df-a821-e9debceb58af
domainwww.dontortaco.com
urlhttp://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/blog?uuid=41fcdb99-7cf5-4296-9690-fc9938f213c0
domainwww.associatedtheatrical.com
urlhttp://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/blog?uuid=d5df444b-e533-4535-9797-08f40baf4f0b
domainwww.uniteppk.com
urlhttp://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/blog?uuid=50585917-0d64-434d-86be-6145703b6ec3
domainwww.eana.com.ar
urlhttp://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/blog?uuid=ea827c06-3e50-4215-b031-385307e23c22
domainwww.synergy-trt.com
urlhttp://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/blog?uuid=1b6eeb3c-9231-44bf-ab8b-16c3eb7e2284
domainwww.bnml.co.uk
urlhttp://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/blog?uuid=055bff03-344a-4bdb-901b-6b98520d47cd
domainwww.postresreina.com
urlhttp://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/blog?uuid=48655caf-4585-42fd-9ab0-386475bc0c00
domainwww.rehavital.de
urlhttp://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/blog?uuid=0a73be27-9f34-45d8-b63d-c4a0a0157f9d
urlhttp://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/blog?uuid=3a2be923-3c7d-48b9-aa44-380fc15b5215
domainwww.cpcgr.com
urlhttp://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/blog?uuid=d5db2e06-b2a3-405f-8354-3783d5e308a1
domainwww.salida.k12.ca.us
urlhttp://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/blog?uuid=faf2030b-b0df-4f52-98f9-3931b91b2ad1
domainwww.paconst.com
urlhttp://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/blog?uuid=e3c69462-969a-4bfd-8992-06497d92921c
domainwww.sunway.com.my
urlhttp://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/blog?uuid=29c74989-187f-43cd-a8bf-c3d3adfd8b78
domainwww.triton.com.pe
domainwww.api.com.ph
urlhttp://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/blog?uuid=4e3a4d8c-18f4-4c90-9ae8-f0ce5e5b4240
urlhttp://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/blog?uuid=b270fcbc-a829-4d7e-8261-079a785eb8c6
domainwww.wellperf.com
urlhttp://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/blog?uuid=e03a3141-5643-405c-98b0-29735f95c049
domainwww.machineriepw.com
urlhttp://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/blog?uuid=68dd90a8-fe7d-405a-87c8-b8d660c18154
domainwww.abmenviro.ca
urlhttp://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/blog?uuid=9f71de4a-ee6f-4382-8148-85ab3c440fc4
urlhttp://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/blog?uuid=9f76650e-5eea-4165-9e20-b375488e9ec6
urlhttp://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/blog?uuid=67e53658-cf53-4b9d-a2df-a6b7a9361416
hash_md55862f9fc9a9a0d766eba29eb4945f619
urlhttp://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/blog?uuid=9a5d858f-7849-458c-8762-abd073fbbb0c
domainwww.gopltd.com
urlhttp://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/blog?uuid=bb832c6c-99a5-48b5-a604-526591d752bd
domainwww.principlediagnostics.com
urlhttp://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/blog?uuid=5179ba1b-2046-4654-854b-eafbce6e6029
domainwww.guntert.com
urlhttp://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/blog?uuid=fe0866f0-5661-4013-be19-98c2a0c1dfc6
domainwww.jubileejobs.org
domainwww.cooper-co.com
urlhttp://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion
domainwww.uvvg.ro
urlhttp://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/blog?uuid=1f231bbf-689b-4a64-be81-ee0b50e736ba
domainwww.contactogarantido.com
urlhttp://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/blog?uuid=c80be6d9-9f48-4983-8d7d-a66e4387bdac
domainwww.wilberts.com
urlhttp://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/blog?uuid=af6a747d-1fc7-42e2-a953-0c198cf49576
domainwww.granvallenegocios.com.ar
urlhttp://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/blog?uuid=a830d214-9f13-4708-8f06-bf1c3021c973
urlhttp://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/blog?uuid=2e7b30b3-0b77-4c92-81f7-9cc3aedee74e
urlhttp://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/blog?uuid=7447e2a7-f4db-466f-9f95-5b57cd5ae6d0
urlhttp://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/blog?uuid=1c576d86-ae95-48bb-8449-5bb196395dfd
urlhttp://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/blog?uuid=bae9234e-d528-484c-b3f9-7aa6966ef175
urlhttp://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/blog?uuid=a87b7c7e-0b27-4645-ab95-af9452a79966
urlhttp://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/blog?uuid=66939367-d4ce-4eb0-aee7-8b5f105e1a1e
urlhttp://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/blog?uuid=2d747df3-258f-4cf7-bb51-bac84535c9d5
urlhttp://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/blog?uuid=64f4ee06-03dc-4857-a00d-db3d4fc4c9ab
urlhttp://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/blog?uuid=23bddd4e-4fd9-41f4-8326-e9feb3b80bc5
urlhttp://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/blog?uuid=b5dfe996-d5bf-462e-933e-ed2a10d33da9
urlhttp://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/blog?uuid=9d3a16a9-ade9-48b6-a574-a211eb8cb600
urlhttp://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/blog?uuid=c9850007-22b0-48d2-8a78-21b36119ee59
urlhttp://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/blog?uuid=24a692b3-a6f9-4abe-9e03-c357aabb3bfe
urlhttp://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/blog?uuid=1277b405-d795-4d1d-bae9-7bd745f18c79
urlhttp://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/blog?uuid=e529c84d-7dce-4795-b526-693855deb497
urlhttp://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/blog?uuid=5b9da671-b54b-4836-970a-d34ef5c6e054
urlhttp://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/blog?uuid=84f95786-5afa-42c0-8497-df4f2f88a889
urlhttp://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/blog?uuid=02b04460-11bf-4f5e-b8a8-025127a60601
urlhttp://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/blog?uuid=4dc4bd1c-9916-4149-a82b-642a9e23b294
urlhttp://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/blog?uuid=72242ba7-5d40-4846-aaa2-074acda345bc
urlhttp://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/blog?uuid=4906fb28-6622-49df-9338-73f4b4e91a86
urlhttp://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/blog?uuid=c75881ec-b0e7-4099-aee0-caef7b261b65
urlhttp://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/blog?uuid=2eec9b51-1ccb-4bf6-a228-7d751fe967f1
urlhttp://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/blog?uuid=1a755bb9-ed64-4b19-9afd-a24a2458e050
urlhttp://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/blog?uuid=38a0301d-4b84-4f56-a5d4-8d8181bf9980
urlhttp://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/blog?uuid=ef8cba54-167e-47a1-b86c-205daf4c8ad4
urlhttp://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/blog?uuid=3df43ee6-1240-49b4-beaa-0711e332d8e1
urlhttp://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/blog?uuid=c579404e-4bb7-4cee-b62a-e7119942263a
urlhttp://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/blog?uuid=42480710-90bb-40d8-a036-99178d61af50
urlhttp://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/blog?uuid=6072235c-e4c9-4151-b086-8e83ed5b9fd7
urlhttp://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/blog?uuid=801161a8-5902-4a46-bebb-0162cc2d2990
urlhttp://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/blog?uuid=9e4c0161-1011-4c9a-88f7-412512a69477
urlhttp://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/blog?uuid=d9559304-65e3-4e4a-bd09-1458a353040a
urlhttp://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/blog?uuid=ed7ed937-727c-4371-9d4d-4502c16433b2
urlhttp://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/blog?uuid=e7cab978-cf1e-42fe-9f4d-4a920708b9db
urlhttp://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/blog?uuid=59a43842-d0d8-41db-ab38-2cd125d91db2
urlhttp://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/blog?uuid=769179b7-db54-45e8-b3ba-9d7c94951e5d