I’ve been investigating the infrastructure behind Cyberleak’s domains and found a lead that Rockstar/Take-Two may want to look into.
cyberleek.vilenarios.com has been associated with the IP 69.124.94.88, which belongs to AS6128 / Cablevision Systems Corp. (Optimum) in the United States.
Other Cyberleak-related gateways have also been observed using 49.13.45.141, an IP belonging to Hetzner infrastructure in Germany.
What makes the U.S. IP interesting is that it appears to be associated with infrastructure related to Vilenarios/Arweave/AR.IO. However, this does NOT prove that 69.124.94.88 is the leaker’s IP or that the leaker is located in New York.
The important question is whether 69.124.94.88 is being used as a server/gateway or as a connection used to administer the infrastructure.
If Rockstar/Take-Two can obtain the relevant logs, they could correlate:
Historical DNS records for cyberleek.vilenarios.com Server/access logs Timestamps of Cyberleak uploads and publications Administrative connections Historical assignment records for 69.124.94.88 In short: I’m not claiming that I identified the leaker. I found a potentially relevant infrastructure lead that may be worth investigating through the private records held by the relevant providers.
If anyone has expertise in AR.IO, Arweave, Optimum, DNS history, or infrastructure analysis, I’d be interested in hearing your thoughts.
Source: r/GTA6unmoderated · by /u/Ok-Clue-8495