Skip to content
Leak-site post naming Confipetrol, captured by ThreatCluster
Back to victims

Confipetrol

qilin

Ransomware leak-site victim intelligence · EN

Views
959
Posted
Oct 11, 2026
Country
CO
Industry
Business Services

Summary

Written by ThreatClusterfrom site fields, victim profile, leak post, screenshot

The group qilin states it leaked data from Confipetrol, a Business Services company with the domain confipetrol.com. The leak post is published and lists a TOX value (7C35408411AEEBD53CDBCEBAB167D7B22F1E66614E89DFCB62EE835416F60E1BCD6995152B68) and a WikileaksV2 link. ThreatCluster captured a screenshot of the leak post.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

Domains
http://www.confipetrol.com

What was taken

Confipetrol

Also stated on the leak page

Fields this group publishes that do not map to a standard column. Labels are the site's own.

TOX
7C35408411AEEBD53CDBCEBAB167D7B22F1E66614E89DFCB62EE835416F60E1BCD6995152B68
WikileaksV2
https://wikileaks2.com/

Leak-site images (2)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture
Logo featuring the letters "CP" in orange, with the word "CONFIPETROL" in blue below it.
onion leak page6.8 KB

Negotiation
Onion http://pandora42btuwlldza4uthk4bssbtsv47y4t5at5mo4ke3h4nqveobyd.onion