{"report_id":"733d5d9a-35aa-4b82-895b-77e2c788203e","version":6,"status":"done","tags":[],"date":"2025-10-17T14:48:26Z","url":{"schema":"http","addr":"datavaults.co/6wr7u4pk4vix/LiesofP.RexaGames.com.rar","fqdn":"datavaults.co","domain":"datavaults.co","tld":"co"},"ip":{"addr":"104.21.12.16","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"datavaults.co/6wr7u4pk4vix/LiesofP.RexaGames.com.rar","fqdn":"datavaults.co","domain":"datavaults.co","tld":"co"},"title":"Download LiesofP Rexa Games com rar"},"submit":{"url":{"schema":"http","addr":"datavaults.co/6wr7u4pk4vix/LiesofP.RexaGames.com.rar","fqdn":"datavaults.co","domain":"datavaults.co","tld":"co"},"ip":{"addr":"104.21.12.16","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-21T14:48:26Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"datavaults.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"datavaults.co","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-11-12","domain_rank":600435,"first_seen":"2024-12-08T00:12:49.947479Z","last_seen":"2025-10-11T23:40:22.374054Z","alert_count":45,"request_count":45,"received_data":899548,"sent_data":27544,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery:3.2.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-10-12T22:12:24.910527Z","alert_count":0,"request_count":2,"received_data":25873,"sent_data":1054,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.66.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2025-10-12T22:16:17.088796Z","alert_count":0,"request_count":1,"received_data":87251,"sent_data":421,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-10-12T22:12:25.402635Z","alert_count":0,"request_count":4,"received_data":34781,"sent_data":2144,"comment":"","tags":null,"fingerprints":null},{"fqdn":"region1.google-analytics.com","ip":{"addr":"216.239.32.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-07-18","domain_rank":19689,"first_seen":"2022-03-17T11:26:33Z","last_seen":"2025-10-16T06:37:30.092041Z","alert_count":0,"request_count":2,"received_data":1674,"sent_data":1996,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-10-12T22:12:10.358486Z","alert_count":0,"request_count":1,"received_data":426982,"sent_data":434,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.2.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.66.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c9f5aeeca3ad37bf2aa006139b935f0a","sha1":"1055018c28ab41087ef9ccefe411606893dabea2","sha256":"87083882cc6015984eb0411a99d3981817f5dc5c90ba24f0940420c5548d82de","sha512":"dcff2b5c2b8625d3593a7531ff4ddcd633939cc9f7acfeb79c18a9e6038fdaa99487960075502f159d44f902d965b0b5aed32b41bfa66a1dc07d85b5d5152b58","ssdeep":"1536:YNhEyjjTikEJO4edXXe9J578go6MWX2xkj8e4c4j2ll2AckaXEP6n15HZ+FhFcQ7:uxc2yjx4j2uX/kcQDU8Cu9","tlshash":"4483e6d9b2c67062977730b950bf410bb17a98dab44c8c60f158d9d47eb8a8d907bf2c","size":86659,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-05-29T18:05:43.200528Z","times_seen":91474,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"datavaults.co/6wr7u4pk4vix/LiesofP.RexaGames.com.rar","fqdn":"datavaults.co","domain":"datavaults.co","tld":"co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"279f5425f25999a85dfba55e94d2ed50","sha1":"e73e78ec918c6daf31791c1eb79c4416a64803de","sha256":"8d6a0e23eaf56b04c558eed2b9fc09ac11678d4df1690dc4dbb61078cf3241f1","sha512":"b82249f7e2316c311e7bed76ab693c11d6e1d76cbbbb6d6d144536b876c4fb88b40c018210fd7d3e9b728a96dd9e1723508e2bfc91414a216b29bac68130123a","ssdeep":"","tlshash":"45c08c88261b0cb141a72a010b6fa608b0063212a8a09e222a1a63844f30e13d7a8818","size":163,"data":"","first_seen":"2025-04-24T06:18:23.57766Z","last_seen":"2026-05-29T13:52:15.334467Z","times_seen":103,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"datavaults.co/6wr7u4pk4vix/LiesofP.RexaGames.com.rar","fqdn":"datavaults.co","domain":"datavaults.co","tld":"co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f34339d0dfb10db55e5ba4b251370084","sha1":"e614a3be8e55683b694eb0109337840b58c05a63","sha256":"b86494035cd8a7d16a87d182bed5212c90ef922890aba240a003b16b0f3a9c1f","sha512":"69642334ecdcd34dbe1a097ef7231e55ce6f593e1915a570e6d3b6f12561b177e9999dff2b6f78ba55ee0117d6937904866f8953cc734266ad15a0460b4b9ec7","ssdeep":"","tlshash":"37c09b0b54d200e098db306f4357620474d040035504d440344cd4704f35b6c56d9588","size":170,"data":"","first_seen":"2025-04-24T06:18:23.578625Z","last_seen":"2026-05-29T13:52:15.336137Z","times_seen":102,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-H62J573123","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"653eb4e768bf8f57cdf621f00aa7e431","sha1":"12685eaf384433154433eba650214921a76e5e65","sha256":"a46a0bdad997f560c140e7c70106d22a3d60647824c9acb02d7f8c6ae54480e4","sha512":"708e40c490fa82ecd965e608973314f1b689c975dd011ad29ea8f1cd17bcb360746db96b7375c620e0f9418a3a338954a655cfbb420d9537fca5cce0d2d20031","ssdeep":"6144:2BiXc6tQSyOe+hy4nkEt7F8KWjxSqpRjeWvkAX6HJLGy1tyyluxwuuSyv:Ij6rRRhy4nkEt7F0EqPeKRy1bv","tlshash":"1c941a8e73c674269396f078503f018ba57b29a2f45cc896f189cce42d74a9a4277f7c","size":426378,"data":"","first_seen":"2025-10-17T14:48:30.162541Z","last_seen":"2025-10-17T14:48:30.162541Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"datavaults.co/js/jquery.cookie.js","fqdn":"datavaults.co","domain":"datavaults.co","tld":"co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ff14e4812b7f512e620b1ad35542bcfc","sha1":"c40c5f777e7a2f63e7b731b3cdb1fe9c806b23ae","sha256":"c4fb91befcf134b81ecfa1c586e1f9d6426c8f4fc1f6c130ac1fddb49ab5df96","sha512":"59e0276314814c6e033fbc81ab9f2541a86bfb85fc263397d0e3f3c1a0cb0c8e5fe2f833998245462903d8a7e9e499d2685b8fc44964935ad282e4e175753d78","ssdeep":"","tlshash":"84516650b7cc325e06ab22516b6f10ace63cff721158449d881965f82cb0c7bdb6bd6b","size":3121,"data":"","first_seen":"2023-03-07T01:23:22Z","last_seen":"2026-05-29T15:41:43.130601Z","times_seen":4766,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"datavaults.co/js/paging.js?r=1","fqdn":"datavaults.co","domain":"datavaults.co","tld":"co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"700579ff132076196592562fb2a36320","sha1":"bbb62d0bf5d56aaf0204a4b1940e534068a15556","sha256":"4c3c04f4b622dd45eb623469d4c93f9a84749f11a64bdc7b1d2be0fa66f61b35","sha512":"975ec1f84b3f848831708343ae7874fde9002a883d5cda86cde2adeb010c359aa68c685266bc2b52f70a2db5306c9a1b283be945f7418f857529e3073f19fad1","ssdeep":"","tlshash":"bd41d06c39e3d0016347627b6b1e96406e66b81b8488dd44bf8c85d14f8de1c76a7afc","size":1967,"data":"","first_seen":"2024-09-28T14:33:24Z","last_seen":"2026-05-29T14:54:23.882681Z","times_seen":918,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"datavaults.co/js/bootstrap-confirm.js?5","fqdn":"datavaults.co","domain":"datavaults.co","tld":"co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5275207ef309e4753330fa9be324db65","sha1":"304d595f5b3edfcf761741da539060752607ae56","sha256":"562df9f8a95b8c00bf068ae92cabcafee53c015fd920bcd6c57aed6508b66b04","sha512":"45cde2b47f3b8642c7aaa1e74227dd018617d6e88223e031616f2340ff93c6a7d8b0b732fd2b0ce6d5cc36bfa09c616bf8442a226648e4a89e2723554e184577","ssdeep":"","tlshash":"3b5152c5a7bf3a06077b2176b98f5242b6398462d027783b5c7426f00ed6f34b38d492","size":2872,"data":"","first_seen":"2024-09-28T14:33:25Z","last_seen":"2026-05-29T14:54:23.873009Z","times_seen":910,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"datavaults.co/js/dialogs.js?5","fqdn":"datavaults.co","domain":"datavaults.co","tld":"co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8df5373f8cb53a6b4aca7dec5e78471f","sha1":"9ed4fa1fa9fb687a521711a2e19fa8bcef19cd96","sha256":"d58759fe14ad23ed725a47cdd638c034025b007361c2a3b9e860c9f6fd6cd4b7","sha512":"e3e2c0f85b09cddb051e228a089d8e3fab6de89f4486f39f19d8859dfe533fa59a4b407448717f783689589a986dcb0485e678ebbb073cb65a2d2962f0e7f26a","ssdeep":"","tlshash":"f2419b9eb8ba6a244a637535f1cf1042b03100475d88bd52fd8c93900f2da2cb6f1bf9","size":2133,"data":"","first_seen":"2024-09-28T14:33:24Z","last_seen":"2026-05-29T14:54:23.876413Z","times_seen":908,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"datavaults.co/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"datavaults.co","domain":"datavaults.co","tld":"co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-05-29T17:57:18.147991Z","times_seen":354344,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"datavaults.co/js/bootstrap.bundle.min.js","fqdn":"datavaults.co","domain":"datavaults.co","tld":"co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6baf57f25796c332144ed58a2a0cd9ee","sha1":"f7fd0f3dc84b2cf93bf81e832505a673f354e0a3","sha256":"82f64f62bb03c1bc1824b0f9c9e05f70dba33e146818e63cdf5c306c8cf3dedd","sha512":"5ff6240d9ca34dfe30c9cd95cb5e981823c7c0063cad9258f8f3a0a24663401da684844524272410673a6325fd78db0f7e7d0fcd3844b8db3eb9aa2613908ee8","ssdeep":"1536:Qmw0iELO+TBR2t472RirWyKsVfK5GEfy3YJtCRv/45wZbqbXZTbYWU178:VwXza3YCl45wZODZTbYR8","tlshash":"cc73c5593244b4730ade85b68037430bf2265998b24b812cb57cadde2a7dcc67277f78","size":80663,"data":"","first_seen":"2023-09-18T01:21:14Z","last_seen":"2026-05-29T16:57:38.964028Z","times_seen":18766,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"datavaults.co/js/jquery.paging.js","fqdn":"datavaults.co","domain":"datavaults.co","tld":"co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d7a2c1c7af2a004a6d68e1e55b1cfb46","sha1":"7fd6daa7076c30381880519ad06ef5639b19ee28","sha256":"c8ecfe747c979fbd87624913200a9237343679923b495885bced089b80fc84f6","sha512":"36693be0b502594cd29b55690eef5a26768a54c05d453cc80abc248db4672b84e9e0130ffc07b18d3ad6b0e1a8666982b861098796db02f7bc5986e74a804ee5","ssdeep":"384:HkTHopqVdI1Zx/wnH9pvJs/8BhmuqBNaz+r7xyCX:HkTHopq7wZx/wnH9JJsEzmuqBNaz+r7r","tlshash":"5b925348e9ea1432622361ba7eef1059ae7ce0379104dd4db84c41a81f55f34b3b9ba9","size":19365,"data":"","first_seen":"2023-03-07T01:23:22Z","last_seen":"2026-05-29T15:41:43.104657Z","times_seen":4269,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"datavaults.co/6wr7u4pk4vix/LiesofP.RexaGames.com.rar","fqdn":"datavaults.co","domain":"datavaults.co","tld":"co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"345798f957340d5c7097cea3d4296560","sha1":"ab28e0bea623e23839838381526c60a08230ae97","sha256":"d1be3010a5a1f949c8dfa2efceb7365c7e04e223c26c30b6f77d1ce821904087","sha512":"69c708ffb6c88ac2cc56c420654d53ac8542be5323c5f2154588fd69bd1eb9138eaf8601ed9e76d6624a19699e334cc5c1d92986b1e51a1654740ae24636206f","ssdeep":"","tlshash":"7a0149ebb74c0610025b616e0e37738970b6a16ecdc2a8dc9ca466a01d34f9d008a95a","size":753,"data":"","first_seen":"2025-10-07T19:41:16.440377Z","last_seen":"2026-05-10T22:27:36.340557Z","times_seen":94,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"datavaults.co/js/app.js?12","fqdn":"datavaults.co","domain":"datavaults.co","tld":"co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"24b7962b6975b6f2c87b2e5565b77b71","sha1":"3e015c95ea89e4f5ec9b76760fd7168fefb4db49","sha256":"3432a6d0ebdf490f7c96b81e51f013063cdb7933c1680198f00282d880248755","sha512":"672cd0c6b3b765ad5ccae9e7adbb9fb94dc4a0cc53b9243181fca1c43b2edd49f98dba998c1f2403808e28b5e60b2a72a7da37c67027e76151de8f98d58e6fdc","ssdeep":"","tlshash":"a461000893b50978c87b35fa565f55983da3000f780dda54360cdd842f506e967fadde","size":3414,"data":"","first_seen":"2024-09-28T14:33:24Z","last_seen":"2026-05-29T14:54:23.868571Z","times_seen":895,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"datavaults.co/6wr7u4pk4vix/LiesofP.RexaGames.com.rar","fqdn":"datavaults.co","domain":"datavaults.co","tld":"co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-17T14:48:02.441Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datavaults.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Sep 2025 16:23:45 GMT","end":"Tue, 09 Dec 2025 17:20:31 GMT"},"fingerprint":{"sha1":"E9:01:D8:27:DB:1F:8C:7F:BE:BA:0C:64:25:DB:6D:EB:73:17:E1:07","sha256":"7D:1C:08:25:E2:4B:23:FC:36:97:B2:DD:C9:BD:71:E4:B3:3D:48:12:D8:94:F3:3F:43:16:2E:7B:FB:A6:6C:AE"}}},"request":{"raw":"GET /6wr7u4pk4vix/LiesofP.RexaGames.com.rar HTTP/1.1\r\nHost: datavaults.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Oct 2025 14:48:04 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=0;includeSubDomains;\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 16 Oct 2025 14:48:04 GMT\r\naccess-control-allow-origin: *\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EXvl5cxJiphve%2F9SvUdabWAFohjKKwdQDKzDWNHaFXNh5WrubLY4uo%2B7UK3%2BZvGoGMYgxTuuUjISF6c62OK%2Fn4D0z6qQPK8ZGNDB\"}]}\r\ncf-cache-status: BYPASS\r\ncontent-encoding: br\r\nset-cookie: affiliate=g9ClqAG7KcAmG91Sh2asAAjfWAAOrLYPpYHs4g1%2FhiI2n5P%2F8JtRJVgYp5LrbMpc1uPAXVYULsSVgWFJyV2bhv1V9PNHTqo%3D; Path=/; Domain=datavaults.co; Expires=Fri, 31 Oct 2025 14:48:04 GMT\nlang=english; Path=/; Domain=datavaults.co\r\ncf-ray: 990098391f1e56a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery:3.2.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":113128,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1570)","md5":"ce6fbd49f183de3d48a7982228efd323","sha1":"7f0e73d365e55ad99712f049ab862b93eec9efc7","sha256":"6c71b0ae735d7e640b0ff22a93d24d0e003641f4006a973d7a7458d338eb7151","sha512":"a0417d0c323b7e47b7bc805034a6cf981ced5b26e8018ea633bc345ceee22bff3a6551c73fc42e8ea2d1446ace91dfef6c8be4eda4039ae54704275063f28526","ssdeep":"768:DmHdxX+UHvmIgU8c6yn8bnSwGE/c/xZ/r/c/UK/j/w/C9+8KM:Dm9xX1HkU8gAnSwG91mxKM","tlshash":"52b3d776c2c8065d654387d096212664739f487ffa6bc7a5babf1b40ff82cc5d08788a","first_seen":"2025-10-17T14:48:30.000928Z","last_seen":"2025-10-17T14:48:30.000928Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2549,"timings":{"blocked":292,"dns":83,"connect":1,"send":0,"wait":1965,"receive":0,"ssl":205},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"datavaults.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"datavaults.co/images/flags/english.svg","fqdn":"datavaults.co","domain":"datavaults.co","tld":"co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://datavaults.co/6wr7u4pk4vix/LiesofP.RexaGames.com.rar","date":"2025-10-17T14:48:04.939Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datavaults.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Sep 2025 16:23:45 GMT","end":"Tue, 09 Dec 2025 17:20:31 GMT"},"fingerprint":{"sha1":"E9:01:D8:27:DB:1F:8C:7F:BE:BA:0C:64:25:DB:6D:EB:73:17:E1:07","sha256":"7D:1C:08:25:E2:4B:23:FC:36:97:B2:DD:C9:BD:71:E4:B3:3D:48:12:D8:94:F3:3F:43:16:2E:7B:FB:A6:6C:AE"}}},"request":{"raw":"GET /images/flags/english.svg HTTP/1.1\r\nHost: datavaults.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://datavaults.co/6wr7u4pk4vix/LiesofP.RexaGames.com.rar\r\nCookie: affiliate=g9ClqAG7KcAmG91Sh2asAAjfWAAOrLYPpYHs4g1%2FhiI2n5P%2F8JtRJVgYp5LrbMpc1uPAXVYULsSVgWFJyV2bhv1V9PNHTqo%3D; lang=english\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Oct 2025 14:48:04 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Mon, 05 Aug 2024 08:34:11 GMT\r\nvary: Accept-Encoding\r\netag: \"66b08e83-6f6\"\r\nexpires: Fri, 31 Oct 2025 12:35:46 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\nage: 1390338\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xiqXhVno18vfKbLMbl6lTON2M9Mkzf90pDFtrAyUfA0qmKxm9uijcjJCUcRH0Z8hk7p2AGqODGsGEK7M4y1gFSI8IGjFBsjZGIqN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 990098469c6d0b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1782,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e4fee6baa53a8dd60ffa9fe2903f2dab","sha1":"7f9ef0544e0638cd0528284dbec21eef03523a2c","sha256":"f0899d32c1c0be5641b17165d70a679c7fca3a088536d82e2d25d17d3910a183","sha512":"6f8007ac08401117be9e34739105a6638f03ab777b62a691dbe9fdf2243eed6f0cadc86a3392afa06cb3c1672445c7da03dc46043ab2760e0a3787ca5259f9e8","ssdeep":"","tlshash":"e1317738814897ad4dd7cbfc8b5264a520ada0dfd2b7db4086d4827013d39adf23c0d6","first_seen":"2024-10-20T14:52:38.672357Z","last_seen":"2026-05-29T14:54:23.88374Z","times_seen":368,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"datavaults.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"datavaults.co/images/flags/hebrew.svg","fqdn":"datavaults.co","domain":"datavaults.co","tld":"co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://datavaults.co/6wr7u4pk4vix/LiesofP.RexaGames.com.rar","date":"2025-10-17T14:48:04.953Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datavaults.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Sep 2025 16:23:45 GMT","end":"Tue, 09 Dec 2025 17:20:31 GMT"},"fingerprint":{"sha1":"E9:01:D8:27:DB:1F:8C:7F:BE:BA:0C:64:25:DB:6D:EB:73:17:E1:07","sha256":"7D:1C:08:25:E2:4B:23:FC:36:97:B2:DD:C9:BD:71:E4:B3:3D:48:12:D8:94:F3:3F:43:16:2E:7B:FB:A6:6C:AE"}}},"request":{"raw":"GET /images/flags/hebrew.svg HTTP/1.1\r\nHost: datavaults.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://datavaults.co/6wr7u4pk4vix/LiesofP.RexaGames.com.rar\r\nCookie: affiliate=g9ClqAG7KcAmG91Sh2asAAjfWAAOrLYPpYHs4g1%2FhiI2n5P%2F8JtRJVgYp5LrbMpc1uPAXVYULsSVgWFJyV2bhv1V9PNHTqo%3D; lang=english\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Oct 2025 14:48:04 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Mon, 05 Aug 2024 08:34:11 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 09 Nov 2025 14:07:24 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nage: 607240\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qlQH5HaNsXV78VUUB7l5%2FYwP2PXjkWRHx3RwP5GUGlIQaRNa7wlyRRR4hYm9oJssg2WupQH%2B5o%2F79svqZtuN0CuBldlmqbh71qAK\"}]}\r\netag: W/\"66b08e83-30e\"\r\ncontent-encoding: br\r\ncf-ray: 99009846ac880b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":782,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c908cb0b2bbb1492c548baa05721933f","sha1":"0cf24f51031726771ba80cfa2f2ce20994673145","sha256":"ff3bf2d1cb7377678311f1b9771cffb79c184acb4d123c4371521b16eae70742","sha512":"f0316711b20db78e88441410df2d23c2f8e7a7ba06a154c81ad7ae7a77d79dc2f33b832b8469e124cc6eac77a44ef08774e2dfd7940a8928c24f2b62c16d0f94","ssdeep":"","tlshash":"4001bd24c5c9e62cd2628784af9ab2e052be20fb4681d3a0c5b4803422168d114bdecd","first_seen":"2024-09-28T14:33:27Z","last_seen":"2026-05-29T14:54:23.862664Z","times_seen":402,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"datavaults.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"datavaults.co/images/ico-download.png","fqdn":"datavaults.co","domain":"datavaults.co","tld":"co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://datavaults.co/6wr7u4pk4vix/LiesofP.RexaGames.com.rar","date":"2025-10-17T14:48:04.955Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datavaults.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Sep 2025 16:23:45 GMT","end":"Tue, 09 Dec 2025 17:20:31 GMT"},"fingerprint":{"sha1":"E9:01:D8:27:DB:1F:8C:7F:BE:BA:0C:64:25:DB:6D:EB:73:17:E1:07","sha256":"7D:1C:08:25:E2:4B:23:FC:36:97:B2:DD:C9:BD:71:E4:B3:3D:48:12:D8:94:F3:3F:43:16:2E:7B:FB:A6:6C:AE"}}},"request":{"raw":"GET /images/ico-download.png HTTP/1.1\r\nHost: datavaults.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://datavaults.co/6wr7u4pk4vix/LiesofP.RexaGames.com.rar\r\nCookie: affiliate=g9ClqAG7KcAmG91Sh2asAAjfWAAOrLYPpYHs4g1%2FhiI2n5P%2F8JtRJVgYp5LrbMpc1uPAXVYULsSVgWFJyV2bhv1V9PNHTqo%3D; lang=english\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Oct 2025 14:48:04 GMT\r\ncontent-type: image/png\r\ncontent-length: 19716\r\nserver: cloudflare\r\nlast-modified: Sun, 15 Dec 2024 05:58:36 GMT\r\netag: \"675e700c-4d04\"\r\nexpires: Fri, 14 Nov 2025 16:43:33 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\nage: 165871\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EGfJdDV0p%2B5%2BjaFSWQ7AbwrvaOQJtfcctzDM9AoSlazyymYXUCP11xi1023WWzrwymkY311S6UlJ1W1mdk5TsAsBWepfztJNKy1h\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 99009846ac8b0b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19716,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 58, 8-bit/color RGBA, non-interlaced","md5":"d3392f61e661918549e65e04f60beab2","sha1":"89fdc77ffa66840932b40a181a2abd67a4d29361","sha256":"34f6c5ec960b155852626eb87f570a83c6f6592c794f7a0978b240da69c5ee5e","sha512":"94e7f9108cd3e9ea1c1fde98ad20ba7d444f2a7aaac0bbbf8fa12c1e181cef51a7d41ae68f37bd0160472a51a700fe7e955646b44a090b454e4206856cb57175","ssdeep":"192:nSbknEc7cISLfGgMUF2xAbBevT+nzOQ5lUvBNv9QNO9hNt96Nj9kN59WN49fNEa8:SwnEkBSLfGgGxSzOqlkSyStSOSKWlPQj","tlshash":"92920f0e6f13cf00dc26b7416fb820a4a59fdf512b54622cbdbefa1f0ba6555ca41c42","first_seen":"2025-04-24T06:18:23.564109Z","last_seen":"2026-05-29T13:52:15.329239Z","times_seen":100,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"datavaults.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"datavaults.co/images/flags/russian.svg","fqdn":"datavaults.co","domain":"datavaults.co","tld":"co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://datavaults.co/6wr7u4pk4vix/LiesofP.RexaGames.com.rar","date":"2025-10-17T14:48:04.940Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datavaults.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Sep 2025 16:23:45 GMT","end":"Tue, 09 Dec 2025 17:20:31 GMT"},"fingerprint":{"sha1":"E9:01:D8:27:DB:1F:8C:7F:BE:BA:0C:64:25:DB:6D:EB:73:17:E1:07","sha256":"7D:1C:08:25:E2:4B:23:FC:36:97:B2:DD:C9:BD:71:E4:B3:3D:48:12:D8:94:F3:3F:43:16:2E:7B:FB:A6:6C:AE"}}},"request":{"raw":"GET /images/flags/russian.svg HTTP/1.1\r\nHost: datavaults.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://datavaults.co/6wr7u4pk4vix/LiesofP.RexaGames.com.rar\r\nCookie: affiliate=g9ClqAG7KcAmG91Sh2asAAjfWAAOrLYPpYHs4g1%2FhiI2n5P%2F8JtRJVgYp5LrbMpc1uPAXVYULsSVgWFJyV2bhv1V9PNHTqo%3D; lang=english\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Oct 2025 14:48:04 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Mon, 05 Aug 2024 08:34:11 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 09 Nov 2025 14:07:23 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nage: 607240\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JJ95M9yElXl44GYWpYctcScXAc4hIMfl7uQDotc8Chsu%2Fz0%2ByyYgwhAF4mWSurc2F%2FOd54rEuTXOxzJ2AlKz%2BEayTmnigjjDR84M\"}]}\r\netag: W/\"66b08e83-1da\"\r\ncontent-encoding: br\r\ncf-ray: 990098469c6e0b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":474,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7f6818f205db1c03eec6fbfe73df5852","sha1":"3938b2b285503b353d36881711a1b1ba5f3aae6d","sha256":"ac35098fb6d139fb7d3ba51551021fe8f5a34750ed0733cdfb6d355cf7d39430","sha512":"878e4d530ef951ce00860c70960844881ff559391a91f0e593a83afdab0ab389263fc63330da43b336cd423a0dac8ea47f6235f2576432519c75d1bb311ad085","ssdeep":"","tlshash":"fef05cbcd645481c606386f0db769162c83cb26893d4c7c857f8edb035436f9b16e4e8","first_seen":"2024-09-28T14:33:26Z","last_seen":"2026-05-29T14:54:23.875331Z","times_seen":437,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"datavaults.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"datavaults.co/images/medium.png","fqdn":"datavaults.co","domain":"datavaults.co","tld":"co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://datavaults.co/6wr7u4pk4vix/LiesofP.RexaGames.com.rar","date":"2025-10-17T14:48:04.974Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datavaults.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Sep 2025 16:23:45 GMT","end":"Tue, 09 Dec 2025 17:20:31 GMT"},"fingerprint":{"sha1":"E9:01:D8:27:DB:1F:8C:7F:BE:BA:0C:64:25:DB:6D:EB:73:17:E1:07","sha256":"7D:1C:08:25:E2:4B:23:FC:36:97:B2:DD:C9:BD:71:E4:B3:3D:48:12:D8:94:F3:3F:43:16:2E:7B:FB:A6:6C:AE"}}},"request":{"raw":"GET /images/medium.png HTTP/1.1\r\nHost: datavaults.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://datavaults.co/6wr7u4pk4vix/LiesofP.RexaGames.com.rar\r\nCookie: affiliate=g9ClqAG7KcAmG91Sh2asAAjfWAAOrLYPpYHs4g1%2FhiI2n5P%2F8JtRJVgYp5LrbMpc1uPAXVYULsSVgWFJyV2bhv1V9PNHTqo%3D; lang=english\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Oct 2025 14:48:04 GMT\r\ncontent-type: image/png\r\ncontent-length: 5174\r\nserver: cloudflare\r\nlast-modified: Sat, 01 Mar 2025 14:42:59 GMT\r\netag: \"67c31cf3-1436\"\r\nexpires: Tue, 28 Oct 2025 12:10:04 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\nage: 1651080\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bAv%2FaRgQ%2BJfL4junT5SmYw3%2FnCNqNXSC0Xlynlh6nNzMRirYZTjkR87sVdSkLhHigXdkCEM4jNU%2BcfC6bjZ%2BXD8aE4T0arkgXiSz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 99009846cca90b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5174,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 43 x 43, 8-bit/color RGBA, non-interlaced","md5":"0dc587be69b144e201fedcacbabc54b5","sha1":"23a2e05d8eecf5194f8c9cc01a4ff7e996070344","sha256":"6726c4d1eea5480af9a90a786003f7565c1183c8e5f1ea6fdd2cbe3474d143ec","sha512":"3a9b7d3bc8947cff3bbdda98f7c38c2d3417600dfda68504220f7a9c3ae2665d2e6eff423ae84f57eaacbd36bfb7bb840a2830257bbf54b1f99ad0e775b841eb","ssdeep":"96:4SJknGLWaOFdxFYahbC9A2H8uY4Hq+HQgaH/4Hh15NGcnGpR1Mhkg4b/LZU5LP+f:4SJknEAxj2pcv4FGf4t042/lUJe","tlshash":"c6b10908fe915c6056199e097afd505347334fc08fe16195aeefce122c651becc4e6da","first_seen":"2025-04-24T06:18:23.566721Z","last_seen":"2026-05-29T13:52:15.319444Z","times_seen":104,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"datavaults.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://datavaults.co/6wr7u4pk4vix/LiesofP.RexaGames.com.rar","date":"2025-10-17T14:48:04.917Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"04:E6:D3:58:E3:A1:E3:05:2B:C3:56:5D:68:BB:1B:0A:08:C6:E3:FB","sha256":"25:4C:B3:A3:9A:E1:D7:FD:25:B6:BF:E9:AA:97:95:20:5D:F2:15:EA:41:46:B6:6B:01:17:19:26:EC:EF:D3:CA"}}},"request":{"raw":"GET /css2?family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://datavaults.co/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 17 Oct 2025 14:48:05 GMT\r\ndate: Fri, 17 Oct 2025 14:48:05 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/bcfae741e379a885f2ab2cf83ebe6d32/mr\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21659,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"17ded04af7b0636d4f8c934291f09ac8","sha1":"d7766b8a83cf1d92c52f7a94654999e4b033365e","sha256":"54985fb48cc0470e63eaaf30034b348ed6bd73cac3f6a759bc1a1c19387af7e7","sha512":"ce25e5ca2afca5d262b17c8d5c5667cccaebce41eacc6afb16f5cd89a838bfd3192564f9a28b450646f2a2fd76414c462f095065c3a45ca72ce31df9c257748d","ssdeep":"384:H3w3s3VR9xqWSUq+DnLami0A0BNBOi/mkX:XEA3mkX","tlshash":"5fa27ad1087be114ab871cc122cf6d36ee0ea254b850e9786bfd1cd8ad97c654371b2d","first_seen":"2025-09-17T03:38:53.893526Z","last_seen":"2026-05-29T17:53:16.343292Z","times_seen":42817,"resource_available":false,"data":null}},"time_used":511,"timings":{"blocked":219,"dns":1,"connect":21,"send":0,"wait":33,"receive":0,"ssl":233},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"datavaults.co/css/bootstrap.css?60","fqdn":"datavaults.co","domain":"datavaults.co","tld":"co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://datavaults.co/6wr7u4pk4vix/LiesofP.RexaGames.com.rar","date":"2025-10-17T14:48:04.921Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datavaults.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Sep 2025 16:23:45 GMT","end":"Tue, 09 Dec 2025 17:20:31 GMT"},"fingerprint":{"sha1":"E9:01:D8:27:DB:1F:8C:7F:BE:BA:0C:64:25:DB:6D:EB:73:17:E1:07","sha256":"7D:1C:08:25:E2:4B:23:FC:36:97:B2:DD:C9:BD:71:E4:B3:3D:48:12:D8:94:F3:3F:43:16:2E:7B:FB:A6:6C:AE"}}},"request":{"raw":"GET /css/bootstrap.css?60 HTTP/1.1\r\nHost: datavaults.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://datavaults.co/6wr7u4pk4vix/LiesofP.RexaGames.com.rar\r\nCookie: affiliate=g9ClqAG7KcAmG91Sh2asAAjfWAAOrLYPpYHs4g1%2FhiI2n5P%2F8JtRJVgYp5LrbMpc1uPAXVYULsSVgWFJyV2bhv1V9PNHTqo%3D; lang=english\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Oct 2025 14:48:04 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Mon, 05 Aug 2024 08:34:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"66b08e83-56d6e\"\r\nexpires: Sun, 02 Nov 2025 07:35:23 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\nage: 1235561\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w%2BofdcdMh4cixVThS33%2FYf1rmo1jvDlsQlBO7AnOhUIzvC4deSFU1UlQawQZdcKt%2FbihGbMfIMzkd%2BFvqdmlAM0AsSQ8RYHapnD1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 990098468c540b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":355694,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"cb09d6d48f0f140d7c23071f46513301","sha1":"7e28e90389ceba8ce4d443537714af9d1ee21018","sha256":"002e93a7aa1c9844bdd96439aeb2aa7a87c42509b9f6d6c6249940925d5e6840","sha512":"0e785d3a89ac491bfd11f46649ad96badfd10896f9a1f1a80d8d5a14c9d581d16c1cae6725e7ee3b7f0a3e3d60aac22e8e852e0f9641117364b7fc647cee70e1","ssdeep":"1536:DppN8+vlfRL11U5gtKjbFtFi+0QV+auN3IjNbPZi:DppNt19auN3IjNbPZi","tlshash":"be74222afde1252c386b495867cabff97b7c90878a05ddb578cf22208f467d148d25c8","first_seen":"2025-04-24T06:18:23.53107Z","last_seen":"2026-05-29T13:52:15.298082Z","times_seen":108,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"datavaults.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.2.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.66.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://datavaults.co/6wr7u4pk4vix/LiesofP.RexaGames.com.rar","date":"2025-10-17T14:48:04.925Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Jun 2025 00:00:00 GMT","end":"Fri, 26 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"56:36:FB:D3:E0:9E:71:88:98:A4:C9:34:94:9B:43:3A:C4:C5:1E:BE","sha256":"9A:64:20:6F:F5:DC:F1:8A:D6:B2:D0:93:C2:7E:62:86:0B:1A:D5:24:CF:CE:4A:9F:4C:0D:F1:FB:F2:A0:A8:1E"}}},"request":{"raw":"GET /jquery-3.2.1.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://datavaults.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-15283\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Fri, 17 Oct 2025 14:48:04 GMT\r\nage: 5125696\r\nx-served-by: cache-lga21971-LGA, cache-hel1410028-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 29, 177682\r\nx-timer: S1760712485.983448,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30125\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":86659,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32058)","md5":"c9f5aeeca3ad37bf2aa006139b935f0a","sha1":"1055018c28ab41087ef9ccefe411606893dabea2","sha256":"87083882cc6015984eb0411a99d3981817f5dc5c90ba24f0940420c5548d82de","sha512":"dcff2b5c2b8625d3593a7531ff4ddcd633939cc9f7acfeb79c18a9e6038fdaa99487960075502f159d44f902d965b0b5aed32b41bfa66a1dc07d85b5d5152b58","ssdeep":"1536:YNhEyjjTikEJO4edXXe9J578go6MWX2xkj8e4c4j2ll2AckaXEP6n15HZ+FhFcQ7:uxc2yjx4j2uX/kcQDU8Cu9","tlshash":"4483e6d9b2c67062977730b950bf410bb17a98dab44c8c60f158d9d47eb8a8d907bf2c","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-05-29T18:05:43.200528Z","times_seen":91474,"resource_available":true,"data":null}},"time_used":157,"timings":{"blocked":39,"dns":0,"connect":28,"send":0,"wait":27,"receive":8,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"datavaults.co/images/flags/arabic.svg","fqdn":"datavaults.co","domain":"datavaults.co","tld":"co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://datavaults.co/6wr7u4pk4vix/LiesofP.RexaGames.com.rar","date":"2025-10-17T14:48:04.944Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datavaults.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Sep 2025 16:23:45 GMT","end":"Tue, 09 Dec 2025 17:20:31 GMT"},"fingerprint":{"sha1":"E9:01:D8:27:DB:1F:8C:7F:BE:BA:0C:64:25:DB:6D:EB:73:17:E1:07","sha256":"7D:1C:08:25:E2:4B:23:FC:36:97:B2:DD:C9:BD:71:E4:B3:3D:48:12:D8:94:F3:3F:43:16:2E:7B:FB:A6:6C:AE"}}},"request":{"raw":"GET /images/flags/arabic.svg HTTP/1.1\r\nHost: datavaults.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://datavaults.co/6wr7u4pk4vix/LiesofP.RexaGames.com.rar\r\nCookie: affiliate=g9ClqAG7KcAmG91Sh2asAAjfWAAOrLYPpYHs4g1%2FhiI2n5P%2F8JtRJVgYp5LrbMpc1uPAXVYULsSVgWFJyV2bhv1V9PNHTqo%3D; lang=english\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Oct 2025 14:48:04 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Mon, 05 Aug 2024 08:34:11 GMT\r\nvary: Accept-Encoding\r\netag: \"66b08e83-1c23\"\r\nexpires: Fri, 31 Oct 2025 21:43:40 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\nage: 1357464\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jRZkwupPRBGFIzMa621qhonyVm0cyQaEQ%2F7DM1IT8PCCRlsMbol0wLxXPL2MzYY1Gm9pB%2BW8acFX1Koyk%2FCHlVzIdXDj98VZRf7Q\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 990098469c750b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7203,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"58fe80e9e2e287dc183e4d1240253747","sha1":"8211d24e2cbce066f9588d0148efcb6a8d5dd7c3","sha256":"45c105853c9ab783d2f64a2e8c9c4ff9ddee7d5d1d0675448dc7732a95d6b7a2","sha512":"0f8392822afa08fd968d4c9429e5aeadcd20d377d460c72c96c16bd21ecfafee65af87cb735fed64f78436d8d0801946134f2ec0e708fa88365046b3fabaf147","ssdeep":"192:ri+0iWmV5diPeis/rCFM0UFET6b+CN8DSPS4:kiWmV5diPeie+FtUFET6b+CISPH","tlshash":"25e18b3d0b40937d66f9e5f9af16e8a932c8509d613bc604abc8c794c6c2d79fc69183","first_seen":"2024-09-28T14:33:26Z","last_seen":"2026-05-29T14:54:23.882174Z","times_seen":452,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"datavaults.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"datavaults.co/images/social/x.svg","fqdn":"datavaults.co","domain":"datavaults.co","tld":"co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://datavaults.co/6wr7u4pk4vix/LiesofP.RexaGames.com.rar","date":"2025-10-17T14:48:04.963Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datavaults.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Sep 2025 16:23:45 GMT","end":"Tue, 09 Dec 2025 17:20:31 GMT"},"fingerprint":{"sha1":"E9:01:D8:27:DB:1F:8C:7F:BE:BA:0C:64:25:DB:6D:EB:73:17:E1:07","sha256":"7D:1C:08:25:E2:4B:23:FC:36:97:B2:DD:C9:BD:71:E4:B3:3D:48:12:D8:94:F3:3F:43:16:2E:7B:FB:A6:6C:AE"}}},"request":{"raw":"GET /images/social/x.svg HTTP/1.1\r\nHost: datavaults.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://datavaults.co/6wr7u4pk4vix/LiesofP.RexaGames.com.rar\r\nCookie: affiliate=g9ClqAG7KcAmG91Sh2asAAjfWAAOrLYPpYHs4g1%2FhiI2n5P%2F8JtRJVgYp5LrbMpc1uPAXVYULsSVgWFJyV2bhv1V9PNHTqo%3D; lang=english\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Oct 2025 14:48:04 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Mon, 05 Aug 2024 08:34:11 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 08 Nov 2025 18:44:40 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nage: 677004\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H7ZC7uK72oXiHIGA9MROG5omhDRWMonJNaqe79FM%2BBZEmwgmZywZyz9u7GfWmppz6hNrrQ2it6W9%2FBTu7am7MOMtmj7yVvCazqLH\"}]}\r\netag: W/\"66b08e83-243\"\r\ncontent-encoding: br\r\ncf-ray: 99009846ac930b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":579,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fac5dad5f58f2ac9300f41c7a4bfe49d","sha1":"5241d07f8158a03ce11dd31875e501158ceb92b3","sha256":"afe971d3817c6ffb6fb4b3739a6f6e1ad56f4e6f0bdcd4a62306f9e035183c17","sha512":"528a91da2b97d5db6f6153eeb513ceef4a87f68d3373171963557385e84cebb8a2a1d19d44c5edc2ff20e7a057246f7becd7693c57ca27252c950770daa1305b","ssdeep":"","tlshash":"edf04c75823d9e54d941cf28472cb47c50f6b1ef88b452549ac09229bc9c5df8cb95f4","first_seen":"2024-11-18T23:01:22.591611Z","last_seen":"2026-05-29T13:52:15.27766Z","times_seen":277,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"datavaults.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://datavaults.co/6wr7u4pk4vix/LiesofP.RexaGames.com.rar","date":"2025-10-17T14:48:05.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"89:22:0A:7D:C4:DA:9A:62:E8:BB:1D:75:F2:AF:6C:80:09:53:D0:9F","sha256":"3E:15:EC:D6:31:6A:14:01:07:F9:F2:65:18:42:B3:08:7B:47:93:0C:CE:2C:93:2D:DA:E4:21:74:79:B6:F0:6F"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://datavaults.co\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7748\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Oct 2025 12:55:03 GMT\r\nexpires: Fri, 16 Oct 2026 12:55:03 GMT\r\ncache-control: public, max-age=31536000\r\nage: 93182\r\nlast-modified: Mon, 15 Sep 2025 16:36:26 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7748,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7748, version 1.0","md5":"a09f2fccfee35b7247b08a1a266f0328","sha1":"0da2d17e738f46d2a09e6fb7969da451719a9820","sha256":"cd36de204aca2d5fa263a731f7c20009b5e3d754ba1f1e03c33e93a48f3e7446","sha512":"5e3f9a298003b84250ec6801e08ad2a4ff8845d4c3e13ea61bec37da24d26ede13b436257882124cc0c27e9a323ba92e7d23c6ad3f48a7b75535f5ed98813a0e","ssdeep":"96:0g6vAF/FXh6MmoI56TEwosGU/DbVF/QBT1gaHEYT6u/w3hXLbJPAS772+6haAftj:zp6x6TYpoDYBJg8TRkbJPAS/2+CzQa7","tlshash":"f3f19de65d1e5e8980f0102f6f6efce767950d88141dadf9a9e72f884c6ba1b04c90cd","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-05-29T17:59:58.308486Z","times_seen":235870,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":65,"dns":0,"connect":21,"send":0,"wait":11,"receive":1,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"datavaults.co/js/dialogs.js?5","fqdn":"datavaults.co","domain":"datavaults.co","tld":"co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://datavaults.co/6wr7u4pk4vix/LiesofP.RexaGames.com.rar","date":"2025-10-17T14:48:04.935Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datavaults.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Sep 2025 16:23:45 GMT","end":"Tue, 09 Dec 2025 17:20:31 GMT"},"fingerprint":{"sha1":"E9:01:D8:27:DB:1F:8C:7F:BE:BA:0C:64:25:DB:6D:EB:73:17:E1:07","sha256":"7D:1C:08:25:E2:4B:23:FC:36:97:B2:DD:C9:BD:71:E4:B3:3D:48:12:D8:94:F3:3F:43:16:2E:7B:FB:A6:6C:AE"}}},"request":{"raw":"GET /js/dialogs.js?5 HTTP/1.1\r\nHost: datavaults.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://datavaults.co/6wr7u4pk4vix/LiesofP.RexaGames.com.rar\r\nCookie: affiliate=g9ClqAG7KcAmG91Sh2asAAjfWAAOrLYPpYHs4g1%2FhiI2n5P%2F8JtRJVgYp5LrbMpc1uPAXVYULsSVgWFJyV2bhv1V9PNHTqo%3D; lang=english\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Oct 2025 14:48:04 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Mon, 05 Aug 2024 08:34:11 GMT\r\nvary: Accept-Encoding\r\netag: \"66b08e83-855\"\r\nexpires: Tue, 28 Oct 2025 12:10:04 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\nage: 1651080\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cKhVjPKWSHq77H3HK2gKObut1r5gtpfIvSQQsECupUh%2BBr8ZLPd%2BZen2oRt0bSClL0WivFiSbxCr6MAj%2B7bYcwWD0jo53wf6pzNF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 990098468c680b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2133,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"8df5373f8cb53a6b4aca7dec5e78471f","sha1":"9ed4fa1fa9fb687a521711a2e19fa8bcef19cd96","sha256":"d58759fe14ad23ed725a47cdd638c034025b007361c2a3b9e860c9f6fd6cd4b7","sha512":"e3e2c0f85b09cddb051e228a089d8e3fab6de89f4486f39f19d8859dfe533fa59a4b407448717f783689589a986dcb0485e678ebbb073cb65a2d2962f0e7f26a","ssdeep":"","tlshash":"f2419b9eb8ba6a244a637535f1cf1042b03100475d88bd52fd8c93900f2da2cb6f1bf9","first_seen":"2024-09-28T14:33:24Z","last_seen":"2026-05-29T14:54:23.876413Z","times_seen":908,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"datavaults.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"datavaults.co/images/logo.png","fqdn":"datavaults.co","domain":"datavaults.co","tld":"co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://datavaults.co/6wr7u4pk4vix/LiesofP.RexaGames.com.rar","date":"2025-10-17T14:48:04.938Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datavaults.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Sep 2025 16:23:45 GMT","end":"Tue, 09 Dec 2025 17:20:31 GMT"},"fingerprint":{"sha1":"E9:01:D8:27:DB:1F:8C:7F:BE:BA:0C:64:25:DB:6D:EB:73:17:E1:07","sha256":"7D:1C:08:25:E2:4B:23:FC:36:97:B2:DD:C9:BD:71:E4:B3:3D:48:12:D8:94:F3:3F:43:16:2E:7B:FB:A6:6C:AE"}}},"request":{"raw":"GET /images/logo.png HTTP/1.1\r\nHost: datavaults.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://datavaults.co/6wr7u4pk4vix/LiesofP.RexaGames.com.rar\r\nCookie: affiliate=g9ClqAG7KcAmG91Sh2asAAjfWAAOrLYPpYHs4g1%2FhiI2n5P%2F8JtRJVgYp5LrbMpc1uPAXVYULsSVgWFJyV2bhv1V9PNHTqo%3D; lang=english\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Oct 2025 14:48:04 GMT\r\ncontent-type: image/png\r\ncontent-length: 12448\r\nserver: cloudflare\r\nlast-modified: Wed, 11 Dec 2024 11:01:12 GMT\r\netag: \"675970f8-30a0\"\r\nexpires: Tue, 28 Oct 2025 12:10:04 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\nage: 1651080\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ByWcErfWlxsL2IiVZcF85GxanZ9gDS93bLrnbwAXV0uKSEGRos%2B%2FxFmP%2FMMyzr83tlm6Eujm%2FYf%2FisPngeEgOafQNQhbO2eRWZyN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 990098469c6c0b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12448,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 294 x 54, 8-bit/color RGBA, non-interlaced","md5":"b891609a11d259f4efd833897e063cf0","sha1":"13caa2ce53e82288a4fac46c4b63cea8127923b4","sha256":"642922f339f635dd1af58084757c7999a54532e332fa1b971f26999567659175","sha512":"ce82e56fced37c3641bc3e6b9be2ab4987948e25689af798178a6aeb3179025e66b670223a045a85e646ee44d2719792cb5b7c31fd9f8445978405293b79a12e","ssdeep":"192:CS7knEgTu7cI+Q4X4Nr1GgMUFAxAbBejiH4ltcHUCuItC5nkxXA5EZ5:dQnE7BUIR1GgQxjiH4Hc0a6Q5","tlshash":"5b42a50e7e12cd00cc6ab3406ff8604165ef9f906b58621cbdbeba1f0fa5595ce85987","first_seen":"2025-04-24T06:18:23.548941Z","last_seen":"2026-05-29T13:52:15.323165Z","times_seen":105,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"datavaults.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"datavaults.co/images/logo-f.png","fqdn":"datavaults.co","domain":"datavaults.co","tld":"co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://datavaults.co/6wr7u4pk4vix/LiesofP.RexaGames.com.rar","date":"2025-10-17T14:48:04.970Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datavaults.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Sep 2025 16:23:45 GMT","end":"Tue, 09 Dec 2025 17:20:31 GMT"},"fingerprint":{"sha1":"E9:01:D8:27:DB:1F:8C:7F:BE:BA:0C:64:25:DB:6D:EB:73:17:E1:07","sha256":"7D:1C:08:25:E2:4B:23:FC:36:97:B2:DD:C9:BD:71:E4:B3:3D:48:12:D8:94:F3:3F:43:16:2E:7B:FB:A6:6C:AE"}}},"request":{"raw":"GET /images/logo-f.png HTTP/1.1\r\nHost: datavaults.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://datavaults.co/6wr7u4pk4vix/LiesofP.RexaGames.com.rar\r\nCookie: affiliate=g9ClqAG7KcAmG91Sh2asAAjfWAAOrLYPpYHs4g1%2FhiI2n5P%2F8JtRJVgYp5LrbMpc1uPAXVYULsSVgWFJyV2bhv1V9PNHTqo%3D; lang=english\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Oct 2025 14:48:04 GMT\r\ncontent-type: image/png\r\ncontent-length: 11583\r\nserver: cloudflare\r\nlast-modified: Wed, 11 Dec 2024 12:54:55 GMT\r\netag: \"67598b9f-2d3f\"\r\nexpires: Sat, 15 Nov 2025 14:31:00 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\nage: 87424\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r6e7MD0nTgGWhb09hq2HuOpGp9Yyp%2Bp9zCv9Se58emzpogtUW0orVdcYSr2SOKinRALO4VZWZKrukfFLFeBcPokHsaEhsJFKevu%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 99009846bca10b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11583,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 235 x 44, 8-bit/color RGBA, non-interlaced","md5":"5dc0e5f1ab5cf09550969182e0d792a8","sha1":"6b1776acfe246c06dd1d8bc97dc1415fe359572d","sha256":"82292575ff9416507d4da16f1f0d0844139407a13215c60086d7fe7c0afde5e2","sha512":"1da57d6cf9f1dc294418ba912712ba4c311d1cf029241445bdbfef362593d7a3a88ec4f4d2d77fa45028cb0c50fa3df82e798c611037207707fbd58e48b79a21","ssdeep":"192:bS7knEv7cIUku1GgMUFAxAbBej5BLrC+YuWAZ2aM1GS5PfN:OQnETBUku1GgQxjnC+YaZDax5PF","tlshash":"d932760e6e53cd00cc25b7806ff9605165bf8f902b54626cbdaefa1f0fa8595ce81987","first_seen":"2025-04-24T06:18:23.567651Z","last_seen":"2026-05-29T13:52:15.290451Z","times_seen":104,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"datavaults.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"datavaults.co/images/pay_secure.png","fqdn":"datavaults.co","domain":"datavaults.co","tld":"co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://datavaults.co/6wr7u4pk4vix/LiesofP.RexaGames.com.rar","date":"2025-10-17T14:48:04.980Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datavaults.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Sep 2025 16:23:45 GMT","end":"Tue, 09 Dec 2025 17:20:31 GMT"},"fingerprint":{"sha1":"E9:01:D8:27:DB:1F:8C:7F:BE:BA:0C:64:25:DB:6D:EB:73:17:E1:07","sha256":"7D:1C:08:25:E2:4B:23:FC:36:97:B2:DD:C9:BD:71:E4:B3:3D:48:12:D8:94:F3:3F:43:16:2E:7B:FB:A6:6C:AE"}}},"request":{"raw":"GET /images/pay_secure.png HTTP/1.1\r\nHost: datavaults.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://datavaults.co/6wr7u4pk4vix/LiesofP.RexaGames.com.rar\r\nCookie: affiliate=g9ClqAG7KcAmG91Sh2asAAjfWAAOrLYPpYHs4g1%2FhiI2n5P%2F8JtRJVgYp5LrbMpc1uPAXVYULsSVgWFJyV2bhv1V9PNHTqo%3D; lang=english\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Oct 2025 14:48:04 GMT\r\ncontent-type: image/png\r\ncontent-length: 16561\r\nserver: cloudflare\r\nlast-modified: Wed, 11 Dec 2024 12:52:15 GMT\r\netag: \"67598aff-40b1\"\r\nexpires: Mon, 20 Oct 2025 04:30:12 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\nage: 2369872\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jKb3bDeBY3HOd4pvwHsuBcMnbHzRkvoRFoSQSLk3gjR6JKnrj3hXFkqaOtSuAH1idFFZ7fEi8mgDo3yqz6p6zi%2FQw42FvuEipcbu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 99009846ccac0b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16561,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 124 x 54, 8-bit/color RGBA, non-interlaced","md5":"748ee45011a4c961f1a2c9f13b57f1b8","sha1":"ce0e36e470bccb37e49fef059528bdd05c88bd13","sha256":"6522c5998474fa3146bfd9d73cb31261dbf87bc8e7137e9ea5a0c5947ee99938","sha512":"25e8905bd929506650ece208891bd67aba123ff6e37ce5a24e19888036629a25a5e71e884d827236277628aafb35455df1349bec978640674150fa6d45197fc9","ssdeep":"384:9OnEMVXpfclIbFgBqjr3JH23CoXBQ5Dp21+/NX:IE3lIbsqZyCCQdY2","tlshash":"d472e80dab22ce108c5af7516ff521a2759fdf501784b16cadfafa2f0bd7166ca42801","first_seen":"2025-04-24T06:18:23.573787Z","last_seen":"2026-05-29T13:52:15.328474Z","times_seen":104,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"datavaults.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"datavaults.co/images/btn-premDownload.png","fqdn":"datavaults.co","domain":"datavaults.co","tld":"co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://datavaults.co/6wr7u4pk4vix/LiesofP.RexaGames.com.rar","date":"2025-10-17T14:48:05.372Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datavaults.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Sep 2025 16:23:45 GMT","end":"Tue, 09 Dec 2025 17:20:31 GMT"},"fingerprint":{"sha1":"E9:01:D8:27:DB:1F:8C:7F:BE:BA:0C:64:25:DB:6D:EB:73:17:E1:07","sha256":"7D:1C:08:25:E2:4B:23:FC:36:97:B2:DD:C9:BD:71:E4:B3:3D:48:12:D8:94:F3:3F:43:16:2E:7B:FB:A6:6C:AE"}}},"request":{"raw":"GET /images/btn-premDownload.png HTTP/1.1\r\nHost: datavaults.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://datavaults.co/6wr7u4pk4vix/LiesofP.RexaGames.com.rar\r\nCookie: affiliate=g9ClqAG7KcAmG91Sh2asAAjfWAAOrLYPpYHs4g1%2FhiI2n5P%2F8JtRJVgYp5LrbMpc1uPAXVYULsSVgWFJyV2bhv1V9PNHTqo%3D; lang=english\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Oct 2025 14:48:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 31643\r\nserver: cloudflare\r\nlast-modified: Sun, 15 Dec 2024 06:12:44 GMT\r\netag: \"675e735c-7b9b\"\r\nexpires: Wed, 22 Oct 2025 00:51:50 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\nage: 2210174\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mwhSpJL%2BNsYqV%2FAWojinHwZQkAQcLJGDY1D7otLTsuz6q%2FRsWm1Fmmzx1uj9wp9LYKzdZsSbI19AhajbH8EqVYSz7tDMSAyv%2FCeq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 990098499ee80b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31643,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 138 x 65, 8-bit/color RGBA, non-interlaced","md5":"06bd4a07f70bf133898fed19579ab4de","sha1":"baf65e2f7782bdbb1623faed7107ec414a106c94","sha256":"396f1b382669f0ac8ce6ac4210c4a4dff2da0bb377d12e1134bd0672994496b0","sha512":"2f4c302a62bc6563084ca7231b7f2caf1a7cb1089147230df59875b136029fb2b7989617314aa1221087215399a790de07e7b68b95b234f7583a83347349f3a3","ssdeep":"384:wwnEABH8mGgGxSzOqlkSyStSOSKWi1P730YqzNdzyP5B+OzmaEpkso3Eq/2/SftE:5Efx4Oql9r1zk5NdzAAOzsuR2KlE","tlshash":"8de2c61e2e23cf00cc26f7406fb920a4b59fdf512b55622cbdbefa1f0ba5555ca41886","first_seen":"2025-04-24T06:18:23.542261Z","last_seen":"2026-05-29T13:52:15.297326Z","times_seen":100,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"datavaults.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"datavaults.co/js/jquery.paging.js","fqdn":"datavaults.co","domain":"datavaults.co","tld":"co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://datavaults.co/6wr7u4pk4vix/LiesofP.RexaGames.com.rar","date":"2025-10-17T14:48:04.929Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datavaults.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Sep 2025 16:23:45 GMT","end":"Tue, 09 Dec 2025 17:20:31 GMT"},"fingerprint":{"sha1":"E9:01:D8:27:DB:1F:8C:7F:BE:BA:0C:64:25:DB:6D:EB:73:17:E1:07","sha256":"7D:1C:08:25:E2:4B:23:FC:36:97:B2:DD:C9:BD:71:E4:B3:3D:48:12:D8:94:F3:3F:43:16:2E:7B:FB:A6:6C:AE"}}},"request":{"raw":"GET /js/jquery.paging.js HTTP/1.1\r\nHost: datavaults.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://datavaults.co/6wr7u4pk4vix/LiesofP.RexaGames.com.rar\r\nCookie: affiliate=g9ClqAG7KcAmG91Sh2asAAjfWAAOrLYPpYHs4g1%2FhiI2n5P%2F8JtRJVgYp5LrbMpc1uPAXVYULsSVgWFJyV2bhv1V9PNHTqo%3D; lang=english\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Oct 2025 14:48:04 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Thu, 06 Sep 2018 10:41:39 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5b910463-4ba5\"\r\nexpires: Mon, 03 Nov 2025 09:34:44 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\nage: 1142000\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3C01HJ5hMKkTPLEyAqXDQyJn1ZCypNclTnwLxynrzGHeqcUyuPM%2F0cZZz3gedx0iYuY3JVARdxeQRCD6rwpv9lHaDFHTWU7cPCA7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 990098468c600b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19365,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"d7a2c1c7af2a004a6d68e1e55b1cfb46","sha1":"7fd6daa7076c30381880519ad06ef5639b19ee28","sha256":"c8ecfe747c979fbd87624913200a9237343679923b495885bced089b80fc84f6","sha512":"36693be0b502594cd29b55690eef5a26768a54c05d453cc80abc248db4672b84e9e0130ffc07b18d3ad6b0e1a8666982b861098796db02f7bc5986e74a804ee5","ssdeep":"384:HkTHopqVdI1Zx/wnH9pvJs/8BhmuqBNaz+r7xyCX:HkTHopq7wZx/wnH9JJsEzmuqBNaz+r7r","tlshash":"5b925348e9ea1432622361ba7eef1059ae7ce0379104dd4db84c41a81f55f34b3b9ba9","first_seen":"2023-03-07T01:23:22Z","last_seen":"2026-05-29T15:41:43.104657Z","times_seen":4269,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"datavaults.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"datavaults.co/images/DataVaults.svg","fqdn":"datavaults.co","domain":"datavaults.co","tld":"co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://datavaults.co/6wr7u4pk4vix/LiesofP.RexaGames.com.rar","date":"2025-10-17T14:48:04.957Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datavaults.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Sep 2025 16:23:45 GMT","end":"Tue, 09 Dec 2025 17:20:31 GMT"},"fingerprint":{"sha1":"E9:01:D8:27:DB:1F:8C:7F:BE:BA:0C:64:25:DB:6D:EB:73:17:E1:07","sha256":"7D:1C:08:25:E2:4B:23:FC:36:97:B2:DD:C9:BD:71:E4:B3:3D:48:12:D8:94:F3:3F:43:16:2E:7B:FB:A6:6C:AE"}}},"request":{"raw":"GET /images/DataVaults.svg HTTP/1.1\r\nHost: datavaults.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://datavaults.co/6wr7u4pk4vix/LiesofP.RexaGames.com.rar\r\nCookie: affiliate=g9ClqAG7KcAmG91Sh2asAAjfWAAOrLYPpYHs4g1%2FhiI2n5P%2F8JtRJVgYp5LrbMpc1uPAXVYULsSVgWFJyV2bhv1V9PNHTqo%3D; lang=english\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Oct 2025 14:48:04 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Mon, 02 Dec 2024 15:07:05 GMT\r\nvary: Accept-Encoding\r\netag: \"674dcd19-3af6\"\r\nexpires: Sat, 01 Nov 2025 16:26:33 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\nage: 1290091\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D4HEesxxEXmq0RoUuXVaumUykGYEMWCWnQa%2BAJ1h%2Fb8DiXl0CYX2o0ed27B9WAWd2Xt37dqnGIEhF8wIX0gwD%2BrLkaXlDVDWohOX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 99009846ac8c0b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15094,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c056d190a6e6691b3a388af962cdbfe6","sha1":"ec49a2c75327856a735278834f61349abc70235d","sha256":"0246e691dc1f744cda1cf4b26945477ab8ba50ad51a3045725479d00c1a40dcd","sha512":"b3c32bac6ae8e3c4cb12bf809f676d7060e5ce8bbdb96e7fcfbb06946dc90eb3afcb63dfc96038cce4b96d3a819c344bfbb55daadbaa0f756c6fd9eab7a4f6f3","ssdeep":"384:y/EGez8em39JUaK9KPUU75Rnm64MLr4YsBb:yPztSadMU7i64Ir4b","tlshash":"0962d06fbdef0a45681114227566fee2268e24d1ed9d1a33700c372eca58c25f8467af","first_seen":"2025-04-24T06:18:23.535395Z","last_seen":"2026-05-29T13:52:15.27313Z","times_seen":105,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"datavaults.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"datavaults.co/images/social/in.svg","fqdn":"datavaults.co","domain":"datavaults.co","tld":"co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://datavaults.co/6wr7u4pk4vix/LiesofP.RexaGames.com.rar","date":"2025-10-17T14:48:04.968Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datavaults.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Sep 2025 16:23:45 GMT","end":"Tue, 09 Dec 2025 17:20:31 GMT"},"fingerprint":{"sha1":"E9:01:D8:27:DB:1F:8C:7F:BE:BA:0C:64:25:DB:6D:EB:73:17:E1:07","sha256":"7D:1C:08:25:E2:4B:23:FC:36:97:B2:DD:C9:BD:71:E4:B3:3D:48:12:D8:94:F3:3F:43:16:2E:7B:FB:A6:6C:AE"}}},"request":{"raw":"GET /images/social/in.svg HTTP/1.1\r\nHost: datavaults.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://datavaults.co/6wr7u4pk4vix/LiesofP.RexaGames.com.rar\r\nCookie: affiliate=g9ClqAG7KcAmG91Sh2asAAjfWAAOrLYPpYHs4g1%2FhiI2n5P%2F8JtRJVgYp5LrbMpc1uPAXVYULsSVgWFJyV2bhv1V9PNHTqo%3D; lang=english\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Oct 2025 14:48:04 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Mon, 05 Aug 2024 08:34:11 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 28 Oct 2025 12:10:04 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nage: 1651080\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DpthHpYlAyF%2FeBOjk60L8pLW6vUjMTj0wHyKSxVhf3ZIHKN8Xr0kBziJImkFpII3HXdb0ksW6GQoPMMiiovTTVgjqJmhrSeeM168\"}]}\r\netag: W/\"66b08e83-348\"\r\ncontent-encoding: br\r\ncf-ray: 99009846bc970b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":840,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0045e3638cbf83d1a4b154ad9b568f1d","sha1":"9dfeab9d4f6531a4f2cd2d1c13592585b51c6a24","sha256":"c348479348682ba4f4be5c9699ae2b46176d25fdeab1ab1dd6140580422527bb","sha512":"7aa58d23b0d7a9c27c34dbc8d3bddd102e8e96a27bb34111c44226fb37b696d0b843984bbfd3c7ad92e7e00cc6e5347a9d7b494804d01a732e4bc1b6e2b47cbd","ssdeep":"","tlshash":"eb01c0b7b79d9281a80383b88b746030ae8f51e77218b1dca950fd91f9090cdd8659bc","first_seen":"2024-11-18T23:01:22.593666Z","last_seen":"2026-05-29T13:52:15.263756Z","times_seen":226,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"datavaults.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"datavaults.co/images/favicon/apple-touch-icon.png","fqdn":"datavaults.co","domain":"datavaults.co","tld":"co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://datavaults.co/6wr7u4pk4vix/LiesofP.RexaGames.com.rar","date":"2025-10-17T14:48:05.526Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datavaults.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Sep 2025 16:23:45 GMT","end":"Tue, 09 Dec 2025 17:20:31 GMT"},"fingerprint":{"sha1":"E9:01:D8:27:DB:1F:8C:7F:BE:BA:0C:64:25:DB:6D:EB:73:17:E1:07","sha256":"7D:1C:08:25:E2:4B:23:FC:36:97:B2:DD:C9:BD:71:E4:B3:3D:48:12:D8:94:F3:3F:43:16:2E:7B:FB:A6:6C:AE"}}},"request":{"raw":"GET /images/favicon/apple-touch-icon.png HTTP/1.1\r\nHost: datavaults.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://datavaults.co/6wr7u4pk4vix/LiesofP.RexaGames.com.rar\r\nCookie: affiliate=g9ClqAG7KcAmG91Sh2asAAjfWAAOrLYPpYHs4g1%2FhiI2n5P%2F8JtRJVgYp5LrbMpc1uPAXVYULsSVgWFJyV2bhv1V9PNHTqo%3D; lang=english\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Oct 2025 14:48:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 19719\r\nserver: cloudflare\r\nlast-modified: Wed, 25 Dec 2024 15:08:07 GMT\r\netag: \"676c1fd7-4d07\"\r\nexpires: Sat, 08 Nov 2025 23:21:30 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\nage: 660394\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5kdRoXHBPqvDcS%2F4nDQjsy%2FubLII4D0l4wK0wZOVP7RsGClIGXPt4i%2FyptLUL8uY8bmjlCYUECKK9ngPKtjKEhlXUzrhKKcAenZB\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9900984a8fad0b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19719,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"827db992fd974202789b60d8b553ad2a","sha1":"084bb74754f23d08fe58c6b536f9e1738b4c3088","sha256":"6c6226aa8e38032a0c7cb72abf20b03d3ddbdd493c61fe246c4c6e1375c462c3","sha512":"42e94733bf0ba0f96852c1c45a408bcf5210a09c912a6c2f4cc0f3710f15cefb35758e3846ddf4f6b8996b0e2000b103703102ed9a590abce88377b742906359","ssdeep":"384:dp0Yw/gLvAdPNsYVIRpbqiLgM5KjPeY7w/J0gDzJA2ga:dYgLvcPNshlGyKjm6w9G2ga","tlshash":"df92c0510350a0dec5d9570fcb5bfae21bdf208fbeb9ea48c9d6c09488492252946e7f","first_seen":"2025-04-24T06:18:23.57662Z","last_seen":"2026-05-29T13:52:15.288496Z","times_seen":104,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"datavaults.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"datavaults.co/images/flags/hungary.svg","fqdn":"datavaults.co","domain":"datavaults.co","tld":"co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://datavaults.co/6wr7u4pk4vix/LiesofP.RexaGames.com.rar","date":"2025-10-17T14:48:04.950Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datavaults.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Sep 2025 16:23:45 GMT","end":"Tue, 09 Dec 2025 17:20:31 GMT"},"fingerprint":{"sha1":"E9:01:D8:27:DB:1F:8C:7F:BE:BA:0C:64:25:DB:6D:EB:73:17:E1:07","sha256":"7D:1C:08:25:E2:4B:23:FC:36:97:B2:DD:C9:BD:71:E4:B3:3D:48:12:D8:94:F3:3F:43:16:2E:7B:FB:A6:6C:AE"}}},"request":{"raw":"GET /images/flags/hungary.svg HTTP/1.1\r\nHost: datavaults.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://datavaults.co/6wr7u4pk4vix/LiesofP.RexaGames.com.rar\r\nCookie: affiliate=g9ClqAG7KcAmG91Sh2asAAjfWAAOrLYPpYHs4g1%2FhiI2n5P%2F8JtRJVgYp5LrbMpc1uPAXVYULsSVgWFJyV2bhv1V9PNHTqo%3D; lang=english\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Oct 2025 14:48:04 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Mon, 05 Aug 2024 08:34:11 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 04 Nov 2025 15:15:06 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nage: 1035178\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FG6a4JzXu0K0Sub7XM%2BUedpG%2Bn2f2jt85V4pZVNUZZoi1I6h4Klpsy2e2wYFTruSWR0oIpI6f0Ct5EnwLBCc5TUCBj2UAN0Ke75e\"}]}\r\netag: W/\"66b08e83-1d1\"\r\ncontent-encoding: br\r\ncf-ray: 99009846ac850b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":465,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6c82191338d5442dda6525b54a35357c","sha1":"3054623a7864c5383cebad8236f6244f7cebccda","sha256":"7ba9e37957bb1ec81f14ecc4b72911ab4d6456430942ca25a69e72492e0ec598","sha512":"633c835316b9f1f06a61a5764f227b9d2308cb5c40592a8830d43ea046cdc98839b3f587c941424084e60c987e3386375b1e82e1461248d844f46439665ddbf4","ssdeep":"","tlshash":"59f02e19e149684d728b4f18e76963314026795842e245cd9b50d73432539d6b11bddc","first_seen":"2024-09-28T14:33:27Z","last_seen":"2026-05-29T14:54:23.863207Z","times_seen":404,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"datavaults.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"datavaults.co/images/social/red.svg","fqdn":"datavaults.co","domain":"datavaults.co","tld":"co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://datavaults.co/6wr7u4pk4vix/LiesofP.RexaGames.com.rar","date":"2025-10-17T14:48:04.959Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datavaults.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Sep 2025 16:23:45 GMT","end":"Tue, 09 Dec 2025 17:20:31 GMT"},"fingerprint":{"sha1":"E9:01:D8:27:DB:1F:8C:7F:BE:BA:0C:64:25:DB:6D:EB:73:17:E1:07","sha256":"7D:1C:08:25:E2:4B:23:FC:36:97:B2:DD:C9:BD:71:E4:B3:3D:48:12:D8:94:F3:3F:43:16:2E:7B:FB:A6:6C:AE"}}},"request":{"raw":"GET /images/social/red.svg HTTP/1.1\r\nHost: datavaults.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://datavaults.co/6wr7u4pk4vix/LiesofP.RexaGames.com.rar\r\nCookie: affiliate=g9ClqAG7KcAmG91Sh2asAAjfWAAOrLYPpYHs4g1%2FhiI2n5P%2F8JtRJVgYp5LrbMpc1uPAXVYULsSVgWFJyV2bhv1V9PNHTqo%3D; lang=english\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Oct 2025 14:48:04 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Mon, 05 Aug 2024 08:34:11 GMT\r\nvary: Accept-Encoding\r\netag: \"66b08e83-7c7\"\r\nexpires: Fri, 14 Nov 2025 04:41:24 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\nage: 209200\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3cHisgN%2BjIQBJq06%2FUarwNWggcYoVlX60lgq8pE05uDtLCNDgZhq0GqA6iOjYNx%2BGaHV8tIc50JxFapo3KMpPDfc%2BKds52zChXkU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 99009846ac910b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1991,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e99f6abd8a2f3175c797b91c9026fbac","sha1":"6befd591cd4829565edba7b20b2ec0291c000ea6","sha256":"c679107829a0f3dc33dd4c590343d8560715d94ab8bf6af6215e94f713b8c0ac","sha512":"8b56f52339c98bc61b275ffcb7f2c871c03aa2d07d55d9cada2240dfa668bf3a79302673a0790f0444cd6273dca356a7c8c06dd2ecd28725fab22f19955eb395","ssdeep":"","tlshash":"a74124f2d3dd8364d00b23e4bc2c7c71792a14bc6bd4cfda857966d2a934c5c58e4094","first_seen":"2024-11-18T23:01:22.585099Z","last_seen":"2026-05-29T13:52:15.31819Z","times_seen":230,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"datavaults.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"datavaults.co/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"datavaults.co","domain":"datavaults.co","tld":"co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://datavaults.co/6wr7u4pk4vix/LiesofP.RexaGames.com.rar","date":"2025-10-17T14:48:04.984Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datavaults.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Sep 2025 16:23:45 GMT","end":"Tue, 09 Dec 2025 17:20:31 GMT"},"fingerprint":{"sha1":"E9:01:D8:27:DB:1F:8C:7F:BE:BA:0C:64:25:DB:6D:EB:73:17:E1:07","sha256":"7D:1C:08:25:E2:4B:23:FC:36:97:B2:DD:C9:BD:71:E4:B3:3D:48:12:D8:94:F3:3F:43:16:2E:7B:FB:A6:6C:AE"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: datavaults.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://datavaults.co/6wr7u4pk4vix/LiesofP.RexaGames.com.rar\r\nCookie: affiliate=g9ClqAG7KcAmG91Sh2asAAjfWAAOrLYPpYHs4g1%2FhiI2n5P%2F8JtRJVgYp5LrbMpc1uPAXVYULsSVgWFJyV2bhv1V9PNHTqo%3D; lang=english\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Oct 2025 14:48:04 GMT\r\ncontent-type: application/javascript\r\nexpires: Fri, 17 Oct 2025 15:36:04 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7pGrQgftqlUCYluCapElONbbDyX7hNLm4hj0WL05UG1fDo0fd9nahEuCaDgVNHLu1%2Fh7xT31OqLXdIe5Zz2gUvtCBGOI2GEKum8X\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 99009846ccad0b49-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-05-29T17:57:18.147991Z","times_seen":354344,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"datavaults.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"region1.google-analytics.com/g/collect?v=2\u0026tid=G-H62J573123\u0026gtm=45je5af1v9206897085za200zd9206897085\u0026_p=1760712485282\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026cid=1069911880.1760712486\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_s=1\u0026tag_exp=101509157~103116026~103200004~103233427~104527906~104528500~104684208~104684211~104948813~115480709~115938465~115938469\u0026sid=1760712485\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fdatavaults.co%2F6wr7u4pk4vix%2FLiesofP.RexaGames.com.rar\u0026dt=Download%20LiesofP%20Rexa%20Games%20com%20rar\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026_ee=1\u0026tfd=3148","fqdn":"region1.google-analytics.com","domain":"google-analytics.com","tld":"com"},"ip":{"addr":"216.239.32.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://datavaults.co/6wr7u4pk4vix/LiesofP.RexaGames.com.rar","date":"2025-10-17T14:48:05.562Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:40:36 GMT","end":"Mon, 15 Dec 2025 08:40:35 GMT"},"fingerprint":{"sha1":"40:7E:33:E9:D5:23:31:43:6B:CB:8C:02:99:3E:C0:A1:96:B1:B2:DE","sha256":"BE:00:72:E8:21:36:BF:F1:E7:F3:E5:B6:86:FE:98:10:97:9F:3C:C4:3F:0A:F8:4D:E4:62:64:B7:70:FA:56:25"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-H62J573123\u0026gtm=45je5af1v9206897085za200zd9206897085\u0026_p=1760712485282\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026cid=1069911880.1760712486\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_s=1\u0026tag_exp=101509157~103116026~103200004~103233427~104527906~104528500~104684208~104684211~104948813~115480709~115938465~115938469\u0026sid=1760712485\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fdatavaults.co%2F6wr7u4pk4vix%2FLiesofP.RexaGames.com.rar\u0026dt=Download%20LiesofP%20Rexa%20Games%20com%20rar\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026_ee=1\u0026tfd=3148 HTTP/1.1\r\nHost: region1.google-analytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://datavaults.co/\r\nOrigin: https://datavaults.co\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\naccess-control-allow-origin: https://datavaults.co\r\ndate: Fri, 17 Oct 2025 14:48:05 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:102:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:102:0\r\nreport-to: {\"group\":\"ascnsrsggc:102:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:102:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-29T17:58:32.740449Z","times_seen":15879964,"resource_available":true,"data":null}},"time_used":182,"timings":{"blocked":74,"dns":1,"connect":21,"send":0,"wait":34,"receive":0,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"datavaults.co/images/flags/japan.svg","fqdn":"datavaults.co","domain":"datavaults.co","tld":"co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://datavaults.co/6wr7u4pk4vix/LiesofP.RexaGames.com.rar","date":"2025-10-17T14:48:04.949Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datavaults.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Sep 2025 16:23:45 GMT","end":"Tue, 09 Dec 2025 17:20:31 GMT"},"fingerprint":{"sha1":"E9:01:D8:27:DB:1F:8C:7F:BE:BA:0C:64:25:DB:6D:EB:73:17:E1:07","sha256":"7D:1C:08:25:E2:4B:23:FC:36:97:B2:DD:C9:BD:71:E4:B3:3D:48:12:D8:94:F3:3F:43:16:2E:7B:FB:A6:6C:AE"}}},"request":{"raw":"GET /images/flags/japan.svg HTTP/1.1\r\nHost: datavaults.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://datavaults.co/6wr7u4pk4vix/LiesofP.RexaGames.com.rar\r\nCookie: affiliate=g9ClqAG7KcAmG91Sh2asAAjfWAAOrLYPpYHs4g1%2FhiI2n5P%2F8JtRJVgYp5LrbMpc1uPAXVYULsSVgWFJyV2bhv1V9PNHTqo%3D; lang=english\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Oct 2025 14:48:04 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Mon, 05 Aug 2024 08:34:11 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 14 Nov 2025 10:20:15 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nage: 188869\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N1vX2EE6tIZP89aaJwdnnjGMvwXa1CC2XtW%2Fg3pNPHtE%2FmLLfSeoAkRDinaiqtu%2FCLpWT8ds3G6ltCfKxn75nyVxymmGdhO6o8Y2\"}]}\r\netag: W/\"66b08e83-30e\"\r\ncontent-encoding: br\r\ncf-ray: 99009846ac830b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":782,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7152680d1b18c863ececc027b0fb85c1","sha1":"10fb494088da2aeb203d1ec429b28741e64c12cf","sha256":"7d9039a9df87828295f3706e1ffcf3fc826d4c607971324b313a3473fae89f50","sha512":"5e0bcc653f61abe4698b2ed0d2db2d0f074742b94d9f3979d19690bed19abcc077482f0ce1653053b394f474ff5de0a204c853f21d891427b51fc1f2f43d2d6a","ssdeep":"","tlshash":"c201493ccb44c6ad88d34afce62291b4c18e41a193e1d7e6aa5c9460b1838f5211a98d","first_seen":"2024-09-28T14:33:27Z","last_seen":"2026-05-29T14:54:23.866308Z","times_seen":405,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"datavaults.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"datavaults.co/images/flags/turkish.svg","fqdn":"datavaults.co","domain":"datavaults.co","tld":"co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://datavaults.co/6wr7u4pk4vix/LiesofP.RexaGames.com.rar","date":"2025-10-17T14:48:04.945Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datavaults.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Sep 2025 16:23:45 GMT","end":"Tue, 09 Dec 2025 17:20:31 GMT"},"fingerprint":{"sha1":"E9:01:D8:27:DB:1F:8C:7F:BE:BA:0C:64:25:DB:6D:EB:73:17:E1:07","sha256":"7D:1C:08:25:E2:4B:23:FC:36:97:B2:DD:C9:BD:71:E4:B3:3D:48:12:D8:94:F3:3F:43:16:2E:7B:FB:A6:6C:AE"}}},"request":{"raw":"GET /images/flags/turkish.svg HTTP/1.1\r\nHost: datavaults.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://datavaults.co/6wr7u4pk4vix/LiesofP.RexaGames.com.rar\r\nCookie: affiliate=g9ClqAG7KcAmG91Sh2asAAjfWAAOrLYPpYHs4g1%2FhiI2n5P%2F8JtRJVgYp5LrbMpc1uPAXVYULsSVgWFJyV2bhv1V9PNHTqo%3D; lang=english\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Oct 2025 14:48:04 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Mon, 05 Aug 2024 08:34:11 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 28 Oct 2025 12:10:04 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nage: 1651080\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BLPCIaOitlZX1cwf1PpwLT6%2BXONBwOKG9taYYelDoK2zsQ0pIVpj0PApZSBLb8ZQ6Kdf1duCAIM2P4pZ6nHm2nvlG2JKtcaFrgvA\"}]}\r\netag: W/\"66b08e83-2c0\"\r\ncontent-encoding: br\r\ncf-ray: 990098469c780b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":704,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f55b2fb4b341f65f36400a17571c0ce6","sha1":"8dea08038fd643d0b900e4290940115748d2bb21","sha256":"7a3d14216a6e3ff6bf190f47c1cfed82984333e1390db5c72d7872640fada0fb","sha512":"c7bfb2c14060ef2fc732e3cbaee45464e0935e0934863349b9dfb68613a93db984c6b0ef1a4cc6b98e8d30eed986c2192ec668ba7766ca63e704052be85a7246","ssdeep":"","tlshash":"fe019e798609d15daa13cbac8f4171e2c06db0dec1f4cb95d570c13172938d9e35f4a8","first_seen":"2024-09-28T14:33:26Z","last_seen":"2026-05-29T14:54:23.865776Z","times_seen":404,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"datavaults.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"datavaults.co/images/flags/dutch.svg","fqdn":"datavaults.co","domain":"datavaults.co","tld":"co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://datavaults.co/6wr7u4pk4vix/LiesofP.RexaGames.com.rar","date":"2025-10-17T14:48:04.952Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datavaults.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Sep 2025 16:23:45 GMT","end":"Tue, 09 Dec 2025 17:20:31 GMT"},"fingerprint":{"sha1":"E9:01:D8:27:DB:1F:8C:7F:BE:BA:0C:64:25:DB:6D:EB:73:17:E1:07","sha256":"7D:1C:08:25:E2:4B:23:FC:36:97:B2:DD:C9:BD:71:E4:B3:3D:48:12:D8:94:F3:3F:43:16:2E:7B:FB:A6:6C:AE"}}},"request":{"raw":"GET /images/flags/dutch.svg HTTP/1.1\r\nHost: datavaults.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://datavaults.co/6wr7u4pk4vix/LiesofP.RexaGames.com.rar\r\nCookie: affiliate=g9ClqAG7KcAmG91Sh2asAAjfWAAOrLYPpYHs4g1%2FhiI2n5P%2F8JtRJVgYp5LrbMpc1uPAXVYULsSVgWFJyV2bhv1V9PNHTqo%3D; lang=english\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Oct 2025 14:48:04 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Mon, 05 Aug 2024 08:34:11 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 28 Oct 2025 12:10:04 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nage: 1651080\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N95Nz8z0NOrKcjNogvNknLNYN0P020MhkL7zZkryie6datV1tfxb1DGmbrmrnZdTzLIcNCED5InLs2kxdvSMQ6B%2F7ACkeVsvUl05\"}]}\r\netag: W/\"66b08e83-1d1\"\r\ncontent-encoding: br\r\ncf-ray: 99009846ac870b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":465,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2d9d8b03235b4b9c8b38e7059531b9bb","sha1":"59057f4598e1aada163fe96f9e37ef500d78031e","sha256":"8b0bf327c4f21371301be287af273267a0c334e4c301c558b614ed0e73905935","sha512":"d6c890a8829b3c79a4fb529093e5e1c621f6f218276efca926af1fd07c6a0c0ef9769632bb26b671b3c5ee48d043e3f4b90613dbd7c26c92d2501736b6687a05","ssdeep":"","tlshash":"1df05c7cd646148d719b4f68db99b3b24439bfa413e5448deef4ab3431129e231ac9c8","first_seen":"2024-09-28T14:33:27Z","last_seen":"2026-05-29T14:54:23.866799Z","times_seen":404,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"datavaults.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://datavaults.co/6wr7u4pk4vix/LiesofP.RexaGames.com.rar","date":"2025-10-17T14:48:05.336Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"89:22:0A:7D:C4:DA:9A:62:E8:BB:1D:75:F2:AF:6C:80:09:53:D0:9F","sha256":"3E:15:EC:D6:31:6A:14:01:07:F9:F2:65:18:42:B3:08:7B:47:93:0C:CE:2C:93:2D:DA:E4:21:74:79:B6:F0:6F"}}},"request":{"raw":"GET /s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://datavaults.co\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7884\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Oct 2025 11:50:33 GMT\r\nexpires: Fri, 16 Oct 2026 11:50:33 GMT\r\ncache-control: public, max-age=31536000\r\nage: 97052\r\nlast-modified: Mon, 15 Sep 2025 16:34:42 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7884,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7884, version 1.0","md5":"9212f6f9860f9fc6c69b02fedf6db8c3","sha1":"ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b","sha256":"7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f","sha512":"67317495f4b53e20a9f31c034e456e6c37f387dffb2c092caa5159bc441cfcadd02749ffe5bbed1d580d5300a59e48a767ef2c6d9978b474f84c1a2cd095c126","ssdeep":"192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI","tlshash":"c3f1ae4eb3f2cd1be40982e53a0fc90b1c578272681fd772d067a22517893bc8db2c81","first_seen":"2023-04-05T15:35:34Z","last_seen":"2026-05-29T17:56:33.097071Z","times_seen":345771,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":65,"dns":4,"connect":7,"send":0,"wait":9,"receive":1,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"region1.google-analytics.com/g/collect?v=2\u0026tid=G-H62J573123\u0026gtm=45je5af1v9206897085za200zd9206897085\u0026_p=1760712485282\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026cid=1069911880.1760712486\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_eu=AEAAAAQ\u0026_s=2\u0026tag_exp=101509157~103116026~103200004~103233427~104527906~104528500~104684208~104684211~104948813~115480709~115938465~115938469\u0026sid=1760712485\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fdatavaults.co%2F6wr7u4pk4vix%2FLiesofP.RexaGames.com.rar\u0026dt=Download%20LiesofP%20Rexa%20Games%20com%20rar\u0026en=scroll\u0026epn.percent_scrolled=90\u0026tfd=8220","fqdn":"region1.google-analytics.com","domain":"google-analytics.com","tld":"com"},"ip":{"addr":"216.239.32.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://datavaults.co/6wr7u4pk4vix/LiesofP.RexaGames.com.rar","date":"2025-10-17T14:48:10.634Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:40:36 GMT","end":"Mon, 15 Dec 2025 08:40:35 GMT"},"fingerprint":{"sha1":"40:7E:33:E9:D5:23:31:43:6B:CB:8C:02:99:3E:C0:A1:96:B1:B2:DE","sha256":"BE:00:72:E8:21:36:BF:F1:E7:F3:E5:B6:86:FE:98:10:97:9F:3C:C4:3F:0A:F8:4D:E4:62:64:B7:70:FA:56:25"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-H62J573123\u0026gtm=45je5af1v9206897085za200zd9206897085\u0026_p=1760712485282\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026cid=1069911880.1760712486\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_eu=AEAAAAQ\u0026_s=2\u0026tag_exp=101509157~103116026~103200004~103233427~104527906~104528500~104684208~104684211~104948813~115480709~115938465~115938469\u0026sid=1760712485\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fdatavaults.co%2F6wr7u4pk4vix%2FLiesofP.RexaGames.com.rar\u0026dt=Download%20LiesofP%20Rexa%20Games%20com%20rar\u0026en=scroll\u0026epn.percent_scrolled=90\u0026tfd=8220 HTTP/1.1\r\nHost: region1.google-analytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://datavaults.co/\r\nOrigin: https://datavaults.co\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\naccess-control-allow-origin: https://datavaults.co\r\ndate: Fri, 17 Oct 2025 14:48:10 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:102:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:102:0\r\nreport-to: {\"group\":\"ascnsrsggc:102:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:102:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-29T17:58:32.740449Z","times_seen":15879964,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":31,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"datavaults.co/js/bootstrap-confirm.js?5","fqdn":"datavaults.co","domain":"datavaults.co","tld":"co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://datavaults.co/6wr7u4pk4vix/LiesofP.RexaGames.com.rar","date":"2025-10-17T14:48:04.934Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datavaults.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Sep 2025 16:23:45 GMT","end":"Tue, 09 Dec 2025 17:20:31 GMT"},"fingerprint":{"sha1":"E9:01:D8:27:DB:1F:8C:7F:BE:BA:0C:64:25:DB:6D:EB:73:17:E1:07","sha256":"7D:1C:08:25:E2:4B:23:FC:36:97:B2:DD:C9:BD:71:E4:B3:3D:48:12:D8:94:F3:3F:43:16:2E:7B:FB:A6:6C:AE"}}},"request":{"raw":"GET /js/bootstrap-confirm.js?5 HTTP/1.1\r\nHost: datavaults.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://datavaults.co/6wr7u4pk4vix/LiesofP.RexaGames.com.rar\r\nCookie: affiliate=g9ClqAG7KcAmG91Sh2asAAjfWAAOrLYPpYHs4g1%2FhiI2n5P%2F8JtRJVgYp5LrbMpc1uPAXVYULsSVgWFJyV2bhv1V9PNHTqo%3D; lang=english\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Oct 2025 14:48:04 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Mon, 05 Aug 2024 08:34:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"66b08e83-b38\"\r\nexpires: Sun, 09 Nov 2025 14:07:23 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\nage: 607240\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SKMh3tHgZvqWYVyOXD2Oy7GjCQP10pBFkVJKJ732qgYJtAGj0fW0dpI5ygw72HyljYvgQE3VDMHnmd6PKdiFX9AV4qgIRuwedfHM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 990098468c670b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2872,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"5275207ef309e4753330fa9be324db65","sha1":"304d595f5b3edfcf761741da539060752607ae56","sha256":"562df9f8a95b8c00bf068ae92cabcafee53c015fd920bcd6c57aed6508b66b04","sha512":"45cde2b47f3b8642c7aaa1e74227dd018617d6e88223e031616f2340ff93c6a7d8b0b732fd2b0ce6d5cc36bfa09c616bf8442a226648e4a89e2723554e184577","ssdeep":"","tlshash":"3b5152c5a7bf3a06077b2176b98f5242b6398462d027783b5c7426f00ed6f34b38d492","first_seen":"2024-09-28T14:33:25Z","last_seen":"2026-05-29T14:54:23.873009Z","times_seen":910,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"datavaults.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"datavaults.co/js/app.js?12","fqdn":"datavaults.co","domain":"datavaults.co","tld":"co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://datavaults.co/6wr7u4pk4vix/LiesofP.RexaGames.com.rar","date":"2025-10-17T14:48:04.928Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datavaults.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Sep 2025 16:23:45 GMT","end":"Tue, 09 Dec 2025 17:20:31 GMT"},"fingerprint":{"sha1":"E9:01:D8:27:DB:1F:8C:7F:BE:BA:0C:64:25:DB:6D:EB:73:17:E1:07","sha256":"7D:1C:08:25:E2:4B:23:FC:36:97:B2:DD:C9:BD:71:E4:B3:3D:48:12:D8:94:F3:3F:43:16:2E:7B:FB:A6:6C:AE"}}},"request":{"raw":"GET /js/app.js?12 HTTP/1.1\r\nHost: datavaults.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://datavaults.co/6wr7u4pk4vix/LiesofP.RexaGames.com.rar\r\nCookie: affiliate=g9ClqAG7KcAmG91Sh2asAAjfWAAOrLYPpYHs4g1%2FhiI2n5P%2F8JtRJVgYp5LrbMpc1uPAXVYULsSVgWFJyV2bhv1V9PNHTqo%3D; lang=english\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Oct 2025 14:48:04 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Mon, 05 Aug 2024 08:34:11 GMT\r\nvary: Accept-Encoding\r\netag: \"66b08e83-d56\"\r\nexpires: Tue, 28 Oct 2025 12:10:04 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\nage: 1651080\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K9nqPlsticgcXaVk6kPTY%2B7Zame233jDRKyoUfJJncbzA2ZgJauoOQnEwQtYVpZ03ekoYBYtBw%2BulwY3K3FavVJN1b5sU%2FTr3R2y\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 990098468c5f0b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3414,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"24b7962b6975b6f2c87b2e5565b77b71","sha1":"3e015c95ea89e4f5ec9b76760fd7168fefb4db49","sha256":"3432a6d0ebdf490f7c96b81e51f013063cdb7933c1680198f00282d880248755","sha512":"672cd0c6b3b765ad5ccae9e7adbb9fb94dc4a0cc53b9243181fca1c43b2edd49f98dba998c1f2403808e28b5e60b2a72a7da37c67027e76151de8f98d58e6fdc","ssdeep":"","tlshash":"a461000893b50978c87b35fa565f55983da3000f780dda54360cdd842f506e967fadde","first_seen":"2024-09-28T14:33:24Z","last_seen":"2026-05-29T14:54:23.868571Z","times_seen":895,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"datavaults.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"datavaults.co/images/instagram.png","fqdn":"datavaults.co","domain":"datavaults.co","tld":"co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://datavaults.co/6wr7u4pk4vix/LiesofP.RexaGames.com.rar","date":"2025-10-17T14:48:04.973Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datavaults.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Sep 2025 16:23:45 GMT","end":"Tue, 09 Dec 2025 17:20:31 GMT"},"fingerprint":{"sha1":"E9:01:D8:27:DB:1F:8C:7F:BE:BA:0C:64:25:DB:6D:EB:73:17:E1:07","sha256":"7D:1C:08:25:E2:4B:23:FC:36:97:B2:DD:C9:BD:71:E4:B3:3D:48:12:D8:94:F3:3F:43:16:2E:7B:FB:A6:6C:AE"}}},"request":{"raw":"GET /images/instagram.png HTTP/1.1\r\nHost: datavaults.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://datavaults.co/6wr7u4pk4vix/LiesofP.RexaGames.com.rar\r\nCookie: affiliate=g9ClqAG7KcAmG91Sh2asAAjfWAAOrLYPpYHs4g1%2FhiI2n5P%2F8JtRJVgYp5LrbMpc1uPAXVYULsSVgWFJyV2bhv1V9PNHTqo%3D; lang=english\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Oct 2025 14:48:04 GMT\r\ncontent-type: image/png\r\ncontent-length: 7453\r\nserver: cloudflare\r\nlast-modified: Sat, 01 Mar 2025 14:43:01 GMT\r\netag: \"67c31cf5-1d1d\"\r\nexpires: Sun, 02 Nov 2025 09:51:53 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\nage: 1227371\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p0i1LkRjUgFxQwCiQHy9%2BqOdjuZsJmuI1X3XilcZqc5dnWkXRv9xsYzumvMFpEtAg%2BKbL%2BpCm0zEudor1coxudTMZuuJTIeXO4a5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 99009846bca30b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7453,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 43 x 43, 8-bit/color RGBA, non-interlaced","md5":"ea998665906c0a5cf75b898dd4030d9a","sha1":"026f710d01544bca52d337b68c74bc686d3d5986","sha256":"43e49e7c0ac70c6422f2e90ad0be284b0d95faccd339912e80c8ac6a20946f9f","sha512":"dd1832fe4f07207de0ca5ab62646bcbc6f980adf84879afd29b97ab5e6f0b63dd6519be00be14c5a6e330bd6da7e9fbcf3e032a166ace630b1fe6af8546238ef","ssdeep":"192:4SJknEH9pcv4FG9zt9JPNaD/v9CcOb6SEJxk9HeeL5/vI:/ynE/VFGFt9B7uSAxSL5/vI","tlshash":"94f15d0df9329c61578eab819afda11647372bc096809185afefcd135e703bd8d0eac5","first_seen":"2025-04-24T06:18:23.529519Z","last_seen":"2026-05-29T13:52:15.327605Z","times_seen":104,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"datavaults.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"datavaults.co/images/discord.png","fqdn":"datavaults.co","domain":"datavaults.co","tld":"co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://datavaults.co/6wr7u4pk4vix/LiesofP.RexaGames.com.rar","date":"2025-10-17T14:48:04.976Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datavaults.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Sep 2025 16:23:45 GMT","end":"Tue, 09 Dec 2025 17:20:31 GMT"},"fingerprint":{"sha1":"E9:01:D8:27:DB:1F:8C:7F:BE:BA:0C:64:25:DB:6D:EB:73:17:E1:07","sha256":"7D:1C:08:25:E2:4B:23:FC:36:97:B2:DD:C9:BD:71:E4:B3:3D:48:12:D8:94:F3:3F:43:16:2E:7B:FB:A6:6C:AE"}}},"request":{"raw":"GET /images/discord.png HTTP/1.1\r\nHost: datavaults.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://datavaults.co/6wr7u4pk4vix/LiesofP.RexaGames.com.rar\r\nCookie: affiliate=g9ClqAG7KcAmG91Sh2asAAjfWAAOrLYPpYHs4g1%2FhiI2n5P%2F8JtRJVgYp5LrbMpc1uPAXVYULsSVgWFJyV2bhv1V9PNHTqo%3D; lang=english\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Oct 2025 14:48:04 GMT\r\ncontent-type: image/png\r\ncontent-length: 6225\r\nserver: cloudflare\r\nlast-modified: Sat, 01 Mar 2025 14:43:00 GMT\r\netag: \"67c31cf4-1851\"\r\nexpires: Sat, 08 Nov 2025 00:13:25 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\nage: 743679\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E%2BXFSyy6bRXQrDtJ94%2FgcRcgFz7evEYi81FBg7ht3Kn0rZSyGNsF1iAjTFuM5QtoSqaD5oQK8hHneMU07GYIL9HyrhZlnLDXVY50\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 99009846ccab0b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6225,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 43 x 43, 8-bit/color RGBA, non-interlaced","md5":"4783905e1880fdf2b2ddc0aa2efbcdc3","sha1":"8d81644bac56ce2ccbdc76ef1590ad7a46a69dbc","sha256":"11e71c46411e7ff4e5a8d0b698afcaa2decd62e9d8c18b45663e82f8bed678d7","sha512":"c2933aa980f269bcde09d51bac477a6b412a38ab527fed48f208338de5e75b0e3dfc57e3c9a59e176188dec6efbea19300b57452c9c621d6d1a169bcc9fa1933","ssdeep":"192:4SJknEApcv4FGtt0ueOJzODhC5zX4HfBgi:/ynE2VFGttaTDezIJn","tlshash":"bfd11a09fa6169946b996e49f4ff505312bbafc04691a080eddbcd0309642bc8c4dbcf","first_seen":"2025-04-24T06:18:23.544735Z","last_seen":"2026-05-29T13:52:15.320456Z","times_seen":104,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"datavaults.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"datavaults.co/images/btn-regDownload.png","fqdn":"datavaults.co","domain":"datavaults.co","tld":"co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://datavaults.co/6wr7u4pk4vix/LiesofP.RexaGames.com.rar","date":"2025-10-17T14:48:05.373Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datavaults.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Sep 2025 16:23:45 GMT","end":"Tue, 09 Dec 2025 17:20:31 GMT"},"fingerprint":{"sha1":"E9:01:D8:27:DB:1F:8C:7F:BE:BA:0C:64:25:DB:6D:EB:73:17:E1:07","sha256":"7D:1C:08:25:E2:4B:23:FC:36:97:B2:DD:C9:BD:71:E4:B3:3D:48:12:D8:94:F3:3F:43:16:2E:7B:FB:A6:6C:AE"}}},"request":{"raw":"GET /images/btn-regDownload.png HTTP/1.1\r\nHost: datavaults.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://datavaults.co/6wr7u4pk4vix/LiesofP.RexaGames.com.rar\r\nCookie: affiliate=g9ClqAG7KcAmG91Sh2asAAjfWAAOrLYPpYHs4g1%2FhiI2n5P%2F8JtRJVgYp5LrbMpc1uPAXVYULsSVgWFJyV2bhv1V9PNHTqo%3D; lang=english\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Oct 2025 14:48:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 18605\r\nserver: cloudflare\r\nlast-modified: Sun, 15 Dec 2024 07:12:02 GMT\r\netag: \"675e8142-48ad\"\r\nexpires: Sun, 26 Oct 2025 23:39:28 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\nage: 1782516\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lhst6PHEBfmKnUHirHgPb%2FeiPwMLvehncAyje2YRMmH9i%2Bqkkk855%2FzWQkCActaE%2BcBlxJp7dW1TTZWriNcvZ6CZbFBpawlHwo5C\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 990098499ee90b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18605,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 29 x 29, 8-bit/color RGBA, non-interlaced","md5":"6d65857653951cb986cc8693391c0c3f","sha1":"ca991d15a056d4812112a7972070c3e2e425f1ba","sha256":"61a3db3982bb18de29f49d4901f06ccb1265be8df3b9bd5779e4345ab55b4518","sha512":"762eb87558b8386cc68f32529881ccaad77b7bdbb4ef4b860dfca0a7eb6d04b0cc5dfe0a1983ed7b429963ee6cfdbf1ca75e8aea9e950d5cb4dba7184155fa50","ssdeep":"384:hwnEKl+9BgYXYlGgGxSzOqlkSyStSOSKWEqOIA:WEKl+MOFx4Oql9tIA","tlshash":"dd82ef0d6f23cf00dc26b7416fb920a4a59fdf511b54622dbdbefa1f1baa145ce81842","first_seen":"2025-04-24T06:18:23.570419Z","last_seen":"2026-05-29T13:52:15.281955Z","times_seen":100,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"datavaults.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"datavaults.co/css/styleNew.css?60","fqdn":"datavaults.co","domain":"datavaults.co","tld":"co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://datavaults.co/6wr7u4pk4vix/LiesofP.RexaGames.com.rar","date":"2025-10-17T14:48:04.923Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datavaults.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Sep 2025 16:23:45 GMT","end":"Tue, 09 Dec 2025 17:20:31 GMT"},"fingerprint":{"sha1":"E9:01:D8:27:DB:1F:8C:7F:BE:BA:0C:64:25:DB:6D:EB:73:17:E1:07","sha256":"7D:1C:08:25:E2:4B:23:FC:36:97:B2:DD:C9:BD:71:E4:B3:3D:48:12:D8:94:F3:3F:43:16:2E:7B:FB:A6:6C:AE"}}},"request":{"raw":"GET /css/styleNew.css?60 HTTP/1.1\r\nHost: datavaults.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://datavaults.co/6wr7u4pk4vix/LiesofP.RexaGames.com.rar\r\nCookie: affiliate=g9ClqAG7KcAmG91Sh2asAAjfWAAOrLYPpYHs4g1%2FhiI2n5P%2F8JtRJVgYp5LrbMpc1uPAXVYULsSVgWFJyV2bhv1V9PNHTqo%3D; lang=english\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Oct 2025 14:48:04 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Wed, 11 Dec 2024 10:29:47 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6759699b-5ee0\"\r\nexpires: Sat, 08 Nov 2025 18:44:39 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\nage: 677005\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PZ1Ph0muk82vD455WyrTraPLAKc5fcl%2FLKppDATsZM7uE%2Bo%2BCQDlnT7gqR8mgnYoIUAruSzFRPfCfvj4O1X%2FdV3Zwkfk5g1V9kBd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 990098468c5c0b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24288,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, ASCII text, with very long lines (510)","md5":"44b092ad8df2750ec0050bd275d0100c","sha1":"80786b9b06d20914a0e355c9110067f60f4e63f1","sha256":"3b810728316ec2c074dd485cac2cdf53337851a9cb78a802b44c0c61b8de820a","sha512":"6065ae22545d35ac7de9cf1be20ae7d60c6a3bbab89e0713b27b5e5be8c40fcffc2585498ad86f0bc53ddb55cbf86fc1c5278be4a87a10368f400f941f264af6","ssdeep":"192:KS1VN46KZXvGxXKtugYoTeCs/IKLN8hWec5+V9rYF8tSNO6Cbmuj339UVfO9cJH2:9qGxXW90cmmXNOf6Ihp2","tlshash":"2ab2557a67a10604381f8c0417559fe0736c80538d0fdbfd7aeb2458df8aae865e275e","first_seen":"2025-04-24T06:18:23.555382Z","last_seen":"2026-05-29T13:52:15.286442Z","times_seen":106,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"datavaults.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"datavaults.co/images/flags/spanish.svg","fqdn":"datavaults.co","domain":"datavaults.co","tld":"co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://datavaults.co/6wr7u4pk4vix/LiesofP.RexaGames.com.rar","date":"2025-10-17T14:48:04.948Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datavaults.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Sep 2025 16:23:45 GMT","end":"Tue, 09 Dec 2025 17:20:31 GMT"},"fingerprint":{"sha1":"E9:01:D8:27:DB:1F:8C:7F:BE:BA:0C:64:25:DB:6D:EB:73:17:E1:07","sha256":"7D:1C:08:25:E2:4B:23:FC:36:97:B2:DD:C9:BD:71:E4:B3:3D:48:12:D8:94:F3:3F:43:16:2E:7B:FB:A6:6C:AE"}}},"request":{"raw":"GET /images/flags/spanish.svg HTTP/1.1\r\nHost: datavaults.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://datavaults.co/6wr7u4pk4vix/LiesofP.RexaGames.com.rar\r\nCookie: affiliate=g9ClqAG7KcAmG91Sh2asAAjfWAAOrLYPpYHs4g1%2FhiI2n5P%2F8JtRJVgYp5LrbMpc1uPAXVYULsSVgWFJyV2bhv1V9PNHTqo%3D; lang=english\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Oct 2025 14:48:04 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Mon, 05 Aug 2024 08:34:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"66b08e83-c9c8\"\r\nexpires: Fri, 14 Nov 2025 23:06:54 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\nage: 142869\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CdtE4leQriFYbnMI3hLxBYUZuhck6do2OCQxwCQouAmY%2B3i7%2BRyEIUu5pyy5NcgF1C6zXC4WLjijRRnqpNHD05mJVDofD9OBV6G0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 990098469c7e0b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51656,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b98731645e1d80ae7a521a25651ee939","sha1":"f6b3e7def6de0466f1981863119855a3ee6cc101","sha256":"65646a7d0135686326f069f08e5a0c59321d487e8e44af665922aea26ceb5571","sha512":"1d94e50f0ec9f9d42aca4824d70659a21fcbb55aa3731e0f9545777f5cb60ae226acc326f6ae288784efa02505304855561150beb41d5ed37d294bbeb92b1a82","ssdeep":"384:MzGip/WFbul8VSe5eUAPFEvmGaBeWEHFCug3Ji7Rg0iX1Ex3y1qrjtnqzvLrOWlR:yOSetmt3Jizt11CHysmMAWQzy","tlshash":"54334b2c0614a3fd04eae6e9df57a9e533dc20a9743b81486edcc384c6c1d79fc5a692","first_seen":"2024-09-28T14:33:26Z","last_seen":"2026-05-29T14:54:23.861191Z","times_seen":487,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"datavaults.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"datavaults.co/images/skype.png","fqdn":"datavaults.co","domain":"datavaults.co","tld":"co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://datavaults.co/6wr7u4pk4vix/LiesofP.RexaGames.com.rar","date":"2025-10-17T14:48:04.975Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datavaults.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Sep 2025 16:23:45 GMT","end":"Tue, 09 Dec 2025 17:20:31 GMT"},"fingerprint":{"sha1":"E9:01:D8:27:DB:1F:8C:7F:BE:BA:0C:64:25:DB:6D:EB:73:17:E1:07","sha256":"7D:1C:08:25:E2:4B:23:FC:36:97:B2:DD:C9:BD:71:E4:B3:3D:48:12:D8:94:F3:3F:43:16:2E:7B:FB:A6:6C:AE"}}},"request":{"raw":"GET /images/skype.png HTTP/1.1\r\nHost: datavaults.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://datavaults.co/6wr7u4pk4vix/LiesofP.RexaGames.com.rar\r\nCookie: affiliate=g9ClqAG7KcAmG91Sh2asAAjfWAAOrLYPpYHs4g1%2FhiI2n5P%2F8JtRJVgYp5LrbMpc1uPAXVYULsSVgWFJyV2bhv1V9PNHTqo%3D; lang=english\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Oct 2025 14:48:04 GMT\r\ncontent-type: image/png\r\ncontent-length: 6476\r\nserver: cloudflare\r\nlast-modified: Sat, 01 Mar 2025 14:43:00 GMT\r\netag: \"67c31cf4-194c\"\r\nexpires: Thu, 06 Nov 2025 21:54:02 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\nage: 838442\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H%2FXRQzUyYwvz6Pqtv8goPmb9uIXj84vYizJQzemQQsmveB2jI0z8%2Br%2FXji8l5la0quyHyEYw9wJAkRoS1XFauZsaqO7xDAm0Wvxn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 99009846ccaa0b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6476,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 43 x 43, 8-bit/color RGBA, non-interlaced","md5":"21212ee490a67624feba8eb1943d4343","sha1":"367774c4a19ab38a8ffb9318a6800fa4f3da16d3","sha256":"8979c1838a7c5d4c83fe806a625d1d61e27b0dd0e44b999218dd24db747df978","sha512":"05fc3c25dcb2a5bab1117ccaec7b30848e0e77330b2ee28a9a2086223e519722c5558038f25af2e6b6b2d57fddcfc21344b8b2dc5ec518fd15903b42603166af","ssdeep":"192:4SJknEVYpcv4FGv6tGdcVs+VLc9F5fQ3U:/ynEEVFGCtqV4LYU3U","tlshash":"26d13a15fa419c20881ada456ffd50636f3767d0a7d0b0885eeadf520ea03b9cd0daca","first_seen":"2025-04-24T06:18:23.568722Z","last_seen":"2026-05-29T13:52:15.276111Z","times_seen":104,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"datavaults.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"datavaults.co/images/flags/indonesia.svg","fqdn":"datavaults.co","domain":"datavaults.co","tld":"co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://datavaults.co/6wr7u4pk4vix/LiesofP.RexaGames.com.rar","date":"2025-10-17T14:48:04.951Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datavaults.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Sep 2025 16:23:45 GMT","end":"Tue, 09 Dec 2025 17:20:31 GMT"},"fingerprint":{"sha1":"E9:01:D8:27:DB:1F:8C:7F:BE:BA:0C:64:25:DB:6D:EB:73:17:E1:07","sha256":"7D:1C:08:25:E2:4B:23:FC:36:97:B2:DD:C9:BD:71:E4:B3:3D:48:12:D8:94:F3:3F:43:16:2E:7B:FB:A6:6C:AE"}}},"request":{"raw":"GET /images/flags/indonesia.svg HTTP/1.1\r\nHost: datavaults.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://datavaults.co/6wr7u4pk4vix/LiesofP.RexaGames.com.rar\r\nCookie: affiliate=g9ClqAG7KcAmG91Sh2asAAjfWAAOrLYPpYHs4g1%2FhiI2n5P%2F8JtRJVgYp5LrbMpc1uPAXVYULsSVgWFJyV2bhv1V9PNHTqo%3D; lang=english\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Oct 2025 14:48:04 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Mon, 05 Aug 2024 08:34:11 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 28 Oct 2025 12:10:04 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nage: 1651080\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ngyw57s%2FMEtOgcDBlmCPmk25VfNRTL9yAJie14C%2Bo3oDDZ0wVa4YWJqQAS6BS0x6mEDcZzY6V1bp5jO5O6gUlIZEPymXf9fqd%2Feg\"}]}\r\netag: W/\"66b08e83-ff\"\r\ncontent-encoding: br\r\ncf-ray: 99009846ac860b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":255,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a2bdaeb527ec48603d578fd4e2b76d61","sha1":"a13cf4b38a3bf9f8ffdb91ade22f4911898699f8","sha256":"35798e2a9caa2fc5173dbc3222e629d387e87987e96c5765fbcae4ffb86cf1ed","sha512":"de4cc702249059ebb7deba0a259fbc7129e2445e005400371eff1165774e8102fed17a88e824428d45bd19c945995d3ad7f52785abe80c69cd186a8aad284546","ssdeep":"","tlshash":"cbd02e24c84cac1c92138260aba632221229232803a80a89ba902879f346d7220aa9cc","first_seen":"2024-09-28T14:33:27Z","last_seen":"2026-05-29T14:54:23.884262Z","times_seen":405,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"datavaults.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"datavaults.co/js/paging.js?r=1","fqdn":"datavaults.co","domain":"datavaults.co","tld":"co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://datavaults.co/6wr7u4pk4vix/LiesofP.RexaGames.com.rar","date":"2025-10-17T14:48:04.932Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datavaults.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Sep 2025 16:23:45 GMT","end":"Tue, 09 Dec 2025 17:20:31 GMT"},"fingerprint":{"sha1":"E9:01:D8:27:DB:1F:8C:7F:BE:BA:0C:64:25:DB:6D:EB:73:17:E1:07","sha256":"7D:1C:08:25:E2:4B:23:FC:36:97:B2:DD:C9:BD:71:E4:B3:3D:48:12:D8:94:F3:3F:43:16:2E:7B:FB:A6:6C:AE"}}},"request":{"raw":"GET /js/paging.js?r=1 HTTP/1.1\r\nHost: datavaults.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://datavaults.co/6wr7u4pk4vix/LiesofP.RexaGames.com.rar\r\nCookie: affiliate=g9ClqAG7KcAmG91Sh2asAAjfWAAOrLYPpYHs4g1%2FhiI2n5P%2F8JtRJVgYp5LrbMpc1uPAXVYULsSVgWFJyV2bhv1V9PNHTqo%3D; lang=english\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Oct 2025 14:48:04 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Mon, 05 Aug 2024 08:34:11 GMT\r\nvary: Accept-Encoding\r\netag: \"66b08e83-7af\"\r\nexpires: Fri, 14 Nov 2025 14:35:32 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\nage: 173552\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=er6ZcqwxK5XBC8mNFK5tu09SbuRaKccq6AwJj9t3b1JglCuPtRH65TOQJbDJItuY2H%2FFKh9JNitjN9Gez7SPgmvp%2FoYfgja%2FK25w\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 990098468c650b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1967,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"HTML document, ASCII text","md5":"700579ff132076196592562fb2a36320","sha1":"bbb62d0bf5d56aaf0204a4b1940e534068a15556","sha256":"4c3c04f4b622dd45eb623469d4c93f9a84749f11a64bdc7b1d2be0fa66f61b35","sha512":"975ec1f84b3f848831708343ae7874fde9002a883d5cda86cde2adeb010c359aa68c685266bc2b52f70a2db5306c9a1b283be945f7418f857529e3073f19fad1","ssdeep":"","tlshash":"bd41d06c39e3d0016347627b6b1e96406e66b81b8488dd44bf8c85d14f8de1c76a7afc","first_seen":"2024-09-28T14:33:24Z","last_seen":"2026-05-29T14:54:23.882681Z","times_seen":918,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"datavaults.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Saira:ital,wght@0,100..900;1,100..900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://datavaults.co/6wr7u4pk4vix/LiesofP.RexaGames.com.rar","date":"2025-10-17T14:48:04.920Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"04:E6:D3:58:E3:A1:E3:05:2B:C3:56:5D:68:BB:1B:0A:08:C6:E3:FB","sha256":"25:4C:B3:A3:9A:E1:D7:FD:25:B6:BF:E9:AA:97:95:20:5D:F2:15:EA:41:46:B6:6B:01:17:19:26:EC:EF:D3:CA"}}},"request":{"raw":"GET /css2?family=Saira:ital,wght@0,100..900;1,100..900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://datavaults.co/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 17 Oct 2025 14:48:05 GMT\r\ndate: Fri, 17 Oct 2025 14:48:05 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2691,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"9ca2a62c2db67817184bcad7d49beee9","sha1":"ee9a07e3f042921566b21fd24d7f550c5533e0f4","sha256":"1320f3e161d084cf523483bc395c5feca9bdaf01353b7cb057e5ddddea045d50","sha512":"9a9c7e39475f426efa3920a4207351b2f40891b652b3f81c6f15f7eecf5a5b1ffe15aa48125eb28ebd5eacca6380f418cd42ff97e0f291600304fa92919ed475","ssdeep":"","tlshash":"c951caa1082e9148e6574cc123da7e31ee8eb1647050d5b97ffd28d9acaec329325b4c","first_seen":"2025-09-05T14:35:50.842096Z","last_seen":"2025-11-16T02:53:36.633195Z","times_seen":32,"resource_available":false,"data":null}},"time_used":501,"timings":{"blocked":214,"dns":1,"connect":23,"send":0,"wait":31,"receive":0,"ssl":228},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"datavaults.co/images/flags/french.svg","fqdn":"datavaults.co","domain":"datavaults.co","tld":"co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://datavaults.co/6wr7u4pk4vix/LiesofP.RexaGames.com.rar","date":"2025-10-17T14:48:04.943Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datavaults.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Sep 2025 16:23:45 GMT","end":"Tue, 09 Dec 2025 17:20:31 GMT"},"fingerprint":{"sha1":"E9:01:D8:27:DB:1F:8C:7F:BE:BA:0C:64:25:DB:6D:EB:73:17:E1:07","sha256":"7D:1C:08:25:E2:4B:23:FC:36:97:B2:DD:C9:BD:71:E4:B3:3D:48:12:D8:94:F3:3F:43:16:2E:7B:FB:A6:6C:AE"}}},"request":{"raw":"GET /images/flags/french.svg HTTP/1.1\r\nHost: datavaults.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://datavaults.co/6wr7u4pk4vix/LiesofP.RexaGames.com.rar\r\nCookie: affiliate=g9ClqAG7KcAmG91Sh2asAAjfWAAOrLYPpYHs4g1%2FhiI2n5P%2F8JtRJVgYp5LrbMpc1uPAXVYULsSVgWFJyV2bhv1V9PNHTqo%3D; lang=english\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Oct 2025 14:48:04 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Mon, 05 Aug 2024 08:34:11 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 02 Nov 2025 09:51:53 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nage: 1227371\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qnNBm6jmmlMAj7yoFVq3WKb0vleBEYlF6wQX77KgGnZZLdYObWCHoXFKS%2BPAZsHec7zu%2BjaIw6DvhXZLv97jQsamoh2RgW74d2MT\"}]}\r\netag: W/\"66b08e83-1d4\"\r\ncontent-encoding: br\r\ncf-ray: 990098469c720b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":468,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"936edcff5b56bb57749cb630fc86d819","sha1":"7b25e1aa876814ffa463060c920b3f722d261985","sha256":"d4916cc314674a6c5889e0262214cb2794fbdfd18f5b80bd9d7a4fd414131b7c","sha512":"d681a4beb7012f047417d3e01210bf7e221a6a797ad084dbbf45b4245c8632d67a25d4a4e50fea1892f918e9ebf00a04e840aa35707ae64631f08a64cda319b5","ssdeep":"","tlshash":"c9f05c21c54645589fa34758d75523f000edb39c42c34f965f398274326ade1727cdcc","first_seen":"2024-09-28T14:33:26Z","last_seen":"2026-05-29T14:54:23.865273Z","times_seen":410,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"datavaults.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"datavaults.co/images/social/wha.svg","fqdn":"datavaults.co","domain":"datavaults.co","tld":"co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://datavaults.co/6wr7u4pk4vix/LiesofP.RexaGames.com.rar","date":"2025-10-17T14:48:04.959Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datavaults.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Sep 2025 16:23:45 GMT","end":"Tue, 09 Dec 2025 17:20:31 GMT"},"fingerprint":{"sha1":"E9:01:D8:27:DB:1F:8C:7F:BE:BA:0C:64:25:DB:6D:EB:73:17:E1:07","sha256":"7D:1C:08:25:E2:4B:23:FC:36:97:B2:DD:C9:BD:71:E4:B3:3D:48:12:D8:94:F3:3F:43:16:2E:7B:FB:A6:6C:AE"}}},"request":{"raw":"GET /images/social/wha.svg HTTP/1.1\r\nHost: datavaults.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://datavaults.co/6wr7u4pk4vix/LiesofP.RexaGames.com.rar\r\nCookie: affiliate=g9ClqAG7KcAmG91Sh2asAAjfWAAOrLYPpYHs4g1%2FhiI2n5P%2F8JtRJVgYp5LrbMpc1uPAXVYULsSVgWFJyV2bhv1V9PNHTqo%3D; lang=english\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Oct 2025 14:48:04 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Mon, 05 Aug 2024 08:34:11 GMT\r\nvary: Accept-Encoding\r\netag: \"66b08e83-6c5\"\r\nexpires: Thu, 06 Nov 2025 05:53:13 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\nage: 896091\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uYBtf6fN9lmgtJnTOhjTMs9ftWDljbBdfya%2B2bi%2FFvaNLGYI62Tw0qjJ50Q9FFpxqxIk6OuCbvixbuPjYGGYgFT8BF3jpgn259Su\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 99009846ac920b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1733,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c71c8d6223abea8ce26ace6918b02c3c","sha1":"a8a5bb9b552b5884c8ceb30578954b15e6bd5fe8","sha256":"08bc1c9af815b269e3601e2c3c234acf69b5413423ff19d584a123f9d281184a","sha512":"948c6d100a60e4b994824901e774b98b0ca9432d0058af68999fc61389c58d2d6657dc2c08f91b6d04628ea99ecf547d7e3bc0980631f6f8a1f75e83b25f6b6b","ssdeep":"","tlshash":"6b31b5a9d2a1e358b5b437ac5f1175a0b5ca34fb6ffb8b304443c4a3b9345ae5c9c058","first_seen":"2024-11-18T23:01:22.587495Z","last_seen":"2026-05-29T13:52:15.326669Z","times_seen":226,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"datavaults.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"datavaults.co/images/social/msg.svg","fqdn":"datavaults.co","domain":"datavaults.co","tld":"co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://datavaults.co/6wr7u4pk4vix/LiesofP.RexaGames.com.rar","date":"2025-10-17T14:48:04.964Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datavaults.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Sep 2025 16:23:45 GMT","end":"Tue, 09 Dec 2025 17:20:31 GMT"},"fingerprint":{"sha1":"E9:01:D8:27:DB:1F:8C:7F:BE:BA:0C:64:25:DB:6D:EB:73:17:E1:07","sha256":"7D:1C:08:25:E2:4B:23:FC:36:97:B2:DD:C9:BD:71:E4:B3:3D:48:12:D8:94:F3:3F:43:16:2E:7B:FB:A6:6C:AE"}}},"request":{"raw":"GET /images/social/msg.svg HTTP/1.1\r\nHost: datavaults.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://datavaults.co/6wr7u4pk4vix/LiesofP.RexaGames.com.rar\r\nCookie: affiliate=g9ClqAG7KcAmG91Sh2asAAjfWAAOrLYPpYHs4g1%2FhiI2n5P%2F8JtRJVgYp5LrbMpc1uPAXVYULsSVgWFJyV2bhv1V9PNHTqo%3D; lang=english\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Oct 2025 14:48:04 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Mon, 05 Aug 2024 08:34:11 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 28 Oct 2025 12:10:04 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nage: 1651080\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OlLmC3o3X9JlHE7SgMCRkVlEy0mn3TZOurTFaGuxDA%2FbO9%2BNwqtA6RTGmwuhOVeWYNlBfQ%2B7DZW8nDGNshh1NkXwh%2FV%2B7CglvCz9\"}]}\r\netag: W/\"66b08e83-3cb\"\r\ncontent-encoding: br\r\ncf-ray: 99009846bc960b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":971,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"45fa19787662d3f7fdf63c1a602db16a","sha1":"f2d66bfbfd9efcc2896ab74a504abcf585174697","sha256":"def0f3c6d6eea2b39705996d5b640510e06881e713defd1651ca21de4d91c2f1","sha512":"5edccec83ffb032e1281ebd94c3e8582dc6b691a91b9671cb88c07336ad29a53ea0b4382a0813f77eaaf7a14aee409ee52c77d2e76f3750e607a4c4b050604fa","ssdeep":"","tlshash":"57115b60c26d8325515bb7246f65b431f4e704fbb6c0f2e1d086fdf2d61985d98ea0a0","first_seen":"2024-11-18T23:01:22.589489Z","last_seen":"2026-05-29T13:52:15.300772Z","times_seen":230,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"datavaults.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"datavaults.co/images/favicon/favicon-16x16.png","fqdn":"datavaults.co","domain":"datavaults.co","tld":"co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://datavaults.co/6wr7u4pk4vix/LiesofP.RexaGames.com.rar","date":"2025-10-17T14:48:05.528Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datavaults.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Sep 2025 16:23:45 GMT","end":"Tue, 09 Dec 2025 17:20:31 GMT"},"fingerprint":{"sha1":"E9:01:D8:27:DB:1F:8C:7F:BE:BA:0C:64:25:DB:6D:EB:73:17:E1:07","sha256":"7D:1C:08:25:E2:4B:23:FC:36:97:B2:DD:C9:BD:71:E4:B3:3D:48:12:D8:94:F3:3F:43:16:2E:7B:FB:A6:6C:AE"}}},"request":{"raw":"GET /images/favicon/favicon-16x16.png HTTP/1.1\r\nHost: datavaults.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://datavaults.co/6wr7u4pk4vix/LiesofP.RexaGames.com.rar\r\nCookie: affiliate=g9ClqAG7KcAmG91Sh2asAAjfWAAOrLYPpYHs4g1%2FhiI2n5P%2F8JtRJVgYp5LrbMpc1uPAXVYULsSVgWFJyV2bhv1V9PNHTqo%3D; lang=english\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Oct 2025 14:48:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 560\r\nserver: cloudflare\r\nlast-modified: Wed, 25 Dec 2024 15:08:05 GMT\r\netag: \"676c1fd5-230\"\r\nexpires: Sun, 09 Nov 2025 19:09:19 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\nage: 589126\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NimlxBbiUijvdtZ3RXYe4mn8%2FuvwSOlr6RndRXd1vEHXqg5HP71XiE6oO1CWOILrJf%2FcGUPN5OKfW8BLcXT1wE2uO42wsJz%2B1yrB\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9900984a8fae0b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":560,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"ca4c8fbb89a09d94131d650722750548","sha1":"e03a52492ffbe1b5d1fcb3cf0011789359d2ae1d","sha256":"adb0ae88b08dbd9abaf1b2a82803b3d457031602f172c542f7360bb0468513b8","sha512":"ae03b8c30ecd6a6c31936a5f86338cf7efd26dc9e9b66e976bd9fe5687ae066581926160a9c9b870b5b2df5e6a584789ac0df9b853e6b0a9ea6067a304e60521","ssdeep":"","tlshash":"bdf096cf7b63d313dc9093a5a108140185793ddd9580b40efa307407170e28418d4456","first_seen":"2025-04-24T06:18:23.543501Z","last_seen":"2026-05-29T13:52:15.268222Z","times_seen":104,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"datavaults.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"datavaults.co/js/bootstrap.bundle.min.js","fqdn":"datavaults.co","domain":"datavaults.co","tld":"co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://datavaults.co/6wr7u4pk4vix/LiesofP.RexaGames.com.rar","date":"2025-10-17T14:48:04.926Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datavaults.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Sep 2025 16:23:45 GMT","end":"Tue, 09 Dec 2025 17:20:31 GMT"},"fingerprint":{"sha1":"E9:01:D8:27:DB:1F:8C:7F:BE:BA:0C:64:25:DB:6D:EB:73:17:E1:07","sha256":"7D:1C:08:25:E2:4B:23:FC:36:97:B2:DD:C9:BD:71:E4:B3:3D:48:12:D8:94:F3:3F:43:16:2E:7B:FB:A6:6C:AE"}}},"request":{"raw":"GET /js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: datavaults.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://datavaults.co/6wr7u4pk4vix/LiesofP.RexaGames.com.rar\r\nCookie: affiliate=g9ClqAG7KcAmG91Sh2asAAjfWAAOrLYPpYHs4g1%2FhiI2n5P%2F8JtRJVgYp5LrbMpc1uPAXVYULsSVgWFJyV2bhv1V9PNHTqo%3D; lang=english\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Oct 2025 14:48:04 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Mon, 05 Aug 2024 08:34:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"66b08e83-13b17\"\r\nexpires: Sun, 09 Nov 2025 14:07:23 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\nage: 607240\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QcHVW5E%2F9YbdAjStQ8Tlg88CaYB5wklLPgne0x6U8v7lnT28oVSoQuLg3cQDcyOyURLqJ8U9PoswUNCaghzptfp9nbRyNkkc1AE3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 990098468c5e0b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80663,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"6baf57f25796c332144ed58a2a0cd9ee","sha1":"f7fd0f3dc84b2cf93bf81e832505a673f354e0a3","sha256":"82f64f62bb03c1bc1824b0f9c9e05f70dba33e146818e63cdf5c306c8cf3dedd","sha512":"5ff6240d9ca34dfe30c9cd95cb5e981823c7c0063cad9258f8f3a0a24663401da684844524272410673a6325fd78db0f7e7d0fcd3844b8db3eb9aa2613908ee8","ssdeep":"1536:Qmw0iELO+TBR2t472RirWyKsVfK5GEfy3YJtCRv/45wZbqbXZTbYWU178:VwXza3YCl45wZODZTbYR8","tlshash":"cc73c5593244b4730ade85b68037430bf2265998b24b812cb57cadde2a7dcc67277f78","first_seen":"2023-09-18T01:21:14Z","last_seen":"2026-05-29T16:57:38.964028Z","times_seen":18766,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"datavaults.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"datavaults.co/images/fb.png","fqdn":"datavaults.co","domain":"datavaults.co","tld":"co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://datavaults.co/6wr7u4pk4vix/LiesofP.RexaGames.com.rar","date":"2025-10-17T14:48:04.971Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datavaults.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Sep 2025 16:23:45 GMT","end":"Tue, 09 Dec 2025 17:20:31 GMT"},"fingerprint":{"sha1":"E9:01:D8:27:DB:1F:8C:7F:BE:BA:0C:64:25:DB:6D:EB:73:17:E1:07","sha256":"7D:1C:08:25:E2:4B:23:FC:36:97:B2:DD:C9:BD:71:E4:B3:3D:48:12:D8:94:F3:3F:43:16:2E:7B:FB:A6:6C:AE"}}},"request":{"raw":"GET /images/fb.png HTTP/1.1\r\nHost: datavaults.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://datavaults.co/6wr7u4pk4vix/LiesofP.RexaGames.com.rar\r\nCookie: affiliate=g9ClqAG7KcAmG91Sh2asAAjfWAAOrLYPpYHs4g1%2FhiI2n5P%2F8JtRJVgYp5LrbMpc1uPAXVYULsSVgWFJyV2bhv1V9PNHTqo%3D; lang=english\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Oct 2025 14:48:04 GMT\r\ncontent-type: image/png\r\ncontent-length: 10085\r\nserver: cloudflare\r\nlast-modified: Wed, 11 Dec 2024 12:52:15 GMT\r\netag: \"67598aff-2765\"\r\nexpires: Thu, 30 Oct 2025 10:19:08 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\nage: 1484936\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wb%2Bro6yqUg2RmOVtjCqzppD%2Be9MlQjZkJhk6O4hBUGfuzsk%2Be1B7HhaqmYAqdfZe%2BaI3mK3YcvSSQPNyqi5jDTrpCYy21cDnr2%2FS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 99009846bca20b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10085,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 43 x 43, 8-bit/color RGBA, non-interlaced","md5":"1557edbf07f781a763a86062b4a9660b","sha1":"7bea5704167381e92158d3a1a87f086785877869","sha256":"40b483167ec64e8b84ed213bbf232eff2ff605efb8dd63b01e821ea116869562","sha512":"3a049527ee81a861eba8cacac47fc8b6c911630fa7773a26d0e2ed11aea7cdf5ef38c2a4229fc2b14c6e4ce2e0038498700c3f4381001a9555d458434c699ac7","ssdeep":"192:4StknEMT7pcv4FGtclIbAXJJJJkXJJJJ7YJJJJXChCkgMUF8xEx+xazbpYW1SE5b:/OnEudVFGtclIbFgBqjEp7","tlshash":"1522120dab22cf108c1af751aff520a1b59fdf501748a22d9df6fb2f0bd615aca45841","first_seen":"2024-12-30T00:00:15.438188Z","last_seen":"2026-05-29T13:52:15.273892Z","times_seen":186,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"datavaults.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://datavaults.co/6wr7u4pk4vix/LiesofP.RexaGames.com.rar","date":"2025-10-17T14:48:05.340Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"89:22:0A:7D:C4:DA:9A:62:E8:BB:1D:75:F2:AF:6C:80:09:53:D0:9F","sha256":"3E:15:EC:D6:31:6A:14:01:07:F9:F2:65:18:42:B3:08:7B:47:93:0C:CE:2C:93:2D:DA:E4:21:74:79:B6:F0:6F"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://datavaults.co\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7816\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 11 Oct 2025 07:02:38 GMT\r\nexpires: Sun, 11 Oct 2026 07:02:38 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:35:07 GMT\r\ncontent-type: font/woff2\r\nage: 546327\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7816,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7816, version 1.0","md5":"25b0e113ca7cce3770d542736db26368","sha1":"cb726212d5d525021752a1d8470a0fb593e0c49e","sha256":"9338e65fc077355c7a87ae0d64cc101e23b9bf8ad78ae65f0f319c857311b526","sha512":"a0d331e62ab4727f49ca286a1ee7fb81cddc5bb9edf71ef84f4bd4fa1552069af1a82752011ba88fae80862d034135926b7e99d70e59d626d66d4ede90e94c30","ssdeep":"192:Agw5ksLwlyK8F2BXU96Fc575OI3+ga534SlEFwTG4ovej9be:Al5y8FSUMS5VOq1KISlvS4ov+4","tlshash":"a3f1af19d5de5a73f80032b45b6911ba7e42fa83bc68bbedf8046a10ad542cb467cc91","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-05-29T18:00:36.56145Z","times_seen":251680,"resource_available":false,"data":null}},"time_used":348,"timings":{"blocked":166,"dns":0,"connect":20,"send":0,"wait":9,"receive":1,"ssl":148},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-H62J573123","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://datavaults.co/6wr7u4pk4vix/LiesofP.RexaGames.com.rar","date":"2025-10-17T14:48:04.936Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:40:36 GMT","end":"Mon, 15 Dec 2025 08:40:35 GMT"},"fingerprint":{"sha1":"40:7E:33:E9:D5:23:31:43:6B:CB:8C:02:99:3E:C0:A1:96:B1:B2:DE","sha256":"BE:00:72:E8:21:36:BF:F1:E7:F3:E5:B6:86:FE:98:10:97:9F:3C:C4:3F:0A:F8:4D:E4:62:64:B7:70:FA:56:25"}}},"request":{"raw":"GET /gtag/js?id=G-H62J573123 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://datavaults.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 17 Oct 2025 14:48:05 GMT\r\nexpires: Fri, 17 Oct 2025 14:48:05 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 141558\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":426378,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"653eb4e768bf8f57cdf621f00aa7e431","sha1":"12685eaf384433154433eba650214921a76e5e65","sha256":"a46a0bdad997f560c140e7c70106d22a3d60647824c9acb02d7f8c6ae54480e4","sha512":"708e40c490fa82ecd965e608973314f1b689c975dd011ad29ea8f1cd17bcb360746db96b7375c620e0f9418a3a338954a655cfbb420d9537fca5cce0d2d20031","ssdeep":"6144:2BiXc6tQSyOe+hy4nkEt7F8KWjxSqpRjeWvkAX6HJLGy1tyyluxwuuSyv:Ij6rRRhy4nkEt7F0EqPeKRy1bv","tlshash":"1c941a8e73c674269396f078503f018ba57b29a2f45cc896f189cce42d74a9a4277f7c","first_seen":"2025-10-17T14:48:30.162541Z","last_seen":"2025-10-17T14:48:30.162541Z","times_seen":1,"resource_available":true,"data":null}},"time_used":543,"timings":{"blocked":199,"dns":0,"connect":29,"send":0,"wait":40,"receive":59,"ssl":212},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"datavaults.co/images/flags/polish.svg","fqdn":"datavaults.co","domain":"datavaults.co","tld":"co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://datavaults.co/6wr7u4pk4vix/LiesofP.RexaGames.com.rar","date":"2025-10-17T14:48:04.946Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datavaults.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Sep 2025 16:23:45 GMT","end":"Tue, 09 Dec 2025 17:20:31 GMT"},"fingerprint":{"sha1":"E9:01:D8:27:DB:1F:8C:7F:BE:BA:0C:64:25:DB:6D:EB:73:17:E1:07","sha256":"7D:1C:08:25:E2:4B:23:FC:36:97:B2:DD:C9:BD:71:E4:B3:3D:48:12:D8:94:F3:3F:43:16:2E:7B:FB:A6:6C:AE"}}},"request":{"raw":"GET /images/flags/polish.svg HTTP/1.1\r\nHost: datavaults.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://datavaults.co/6wr7u4pk4vix/LiesofP.RexaGames.com.rar\r\nCookie: affiliate=g9ClqAG7KcAmG91Sh2asAAjfWAAOrLYPpYHs4g1%2FhiI2n5P%2F8JtRJVgYp5LrbMpc1uPAXVYULsSVgWFJyV2bhv1V9PNHTqo%3D; lang=english\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Oct 2025 14:48:04 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Mon, 05 Aug 2024 08:34:11 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 26 Oct 2025 20:39:18 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nage: 1793326\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n5cfTQmeNyIWo6JmFZghcM7kUsjahdkdG42hNj6iGXfgKB6gr1YJ1lGy%2B56YDJqEInbVXoV4chJ1%2Bbr%2F%2FBoVsxFZjUUDgL%2FeE2jK\"}]}\r\netag: W/\"66b08e83-fc\"\r\ncontent-encoding: br\r\ncf-ray: 990098469c790b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":252,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"37576a316775f7e78526d0c6fa826e39","sha1":"4ef1cf1f776954eb3427cd41f51f34ec6384234e","sha256":"341253a598c8eff9ee9c55ac9aa83503e1ddf4e0893d2148c3c2423e9bee7df5","sha512":"a6ba66f19f50f0ffaa4e9d93b04bf770fa1054528a87ed15b421cfc6edec8d3812787d9f0bd3869c8a477d3bf25d8af6b1114b5f66e290cea51935e68bbe5cef","ssdeep":"","tlshash":"61d095b8cd4cfc1d55338110d7d53267011522090365074df6a02739f2c7d7220798cc","first_seen":"2024-09-28T14:33:26Z","last_seen":"2026-05-29T14:54:23.870641Z","times_seen":405,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"datavaults.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"datavaults.co/images/social/fb.svg","fqdn":"datavaults.co","domain":"datavaults.co","tld":"co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://datavaults.co/6wr7u4pk4vix/LiesofP.RexaGames.com.rar","date":"2025-10-17T14:48:04.958Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datavaults.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Sep 2025 16:23:45 GMT","end":"Tue, 09 Dec 2025 17:20:31 GMT"},"fingerprint":{"sha1":"E9:01:D8:27:DB:1F:8C:7F:BE:BA:0C:64:25:DB:6D:EB:73:17:E1:07","sha256":"7D:1C:08:25:E2:4B:23:FC:36:97:B2:DD:C9:BD:71:E4:B3:3D:48:12:D8:94:F3:3F:43:16:2E:7B:FB:A6:6C:AE"}}},"request":{"raw":"GET /images/social/fb.svg HTTP/1.1\r\nHost: datavaults.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://datavaults.co/6wr7u4pk4vix/LiesofP.RexaGames.com.rar\r\nCookie: affiliate=g9ClqAG7KcAmG91Sh2asAAjfWAAOrLYPpYHs4g1%2FhiI2n5P%2F8JtRJVgYp5LrbMpc1uPAXVYULsSVgWFJyV2bhv1V9PNHTqo%3D; lang=english\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Oct 2025 14:48:04 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Mon, 05 Aug 2024 08:34:11 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 06 Nov 2025 21:54:02 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nage: 838442\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1nCnaE8mes5Az81Xac73BEWC3qohtB%2Ft%2FuJ8%2FBpt5Q13FCzSWGFn7S4d4Qh5U5xjtjgkKFseyaVkjVEmt%2BB%2Ff3tV1immkeBMfvIi\"}]}\r\netag: W/\"66b08e83-23c\"\r\ncontent-encoding: br\r\ncf-ray: 99009846ac8f0b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":572,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ef63b27df17542ef803f7a059d7a4088","sha1":"d7e26b793261ea9a9cb9a85ec2078363f295920f","sha256":"84830edcda6374ce940db41fc62c7a708f9f2ce91b95b60f85d74a6915867f85","sha512":"8238e06a0ef06b99123c34e4dbbe2f563f93f1923bfd25bfead373b6daa6c8a167273eeeb47061f77824221d98e4e72f99e365b4eed6be7d7dba2f99fded6959","ssdeep":"","tlshash":"8ff08b06e3b8012489061aac722d6c71585d2c80a184cddcd6d0df87be18cee88d91b7","first_seen":"2024-11-18T23:01:22.582939Z","last_seen":"2026-05-29T13:52:15.300142Z","times_seen":279,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"datavaults.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"datavaults.co/js/jquery.cookie.js","fqdn":"datavaults.co","domain":"datavaults.co","tld":"co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://datavaults.co/6wr7u4pk4vix/LiesofP.RexaGames.com.rar","date":"2025-10-17T14:48:04.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datavaults.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Sep 2025 16:23:45 GMT","end":"Tue, 09 Dec 2025 17:20:31 GMT"},"fingerprint":{"sha1":"E9:01:D8:27:DB:1F:8C:7F:BE:BA:0C:64:25:DB:6D:EB:73:17:E1:07","sha256":"7D:1C:08:25:E2:4B:23:FC:36:97:B2:DD:C9:BD:71:E4:B3:3D:48:12:D8:94:F3:3F:43:16:2E:7B:FB:A6:6C:AE"}}},"request":{"raw":"GET /js/jquery.cookie.js HTTP/1.1\r\nHost: datavaults.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://datavaults.co/6wr7u4pk4vix/LiesofP.RexaGames.com.rar\r\nCookie: affiliate=g9ClqAG7KcAmG91Sh2asAAjfWAAOrLYPpYHs4g1%2FhiI2n5P%2F8JtRJVgYp5LrbMpc1uPAXVYULsSVgWFJyV2bhv1V9PNHTqo%3D; lang=english\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Oct 2025 14:48:04 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Thu, 06 Sep 2018 10:41:39 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5b910463-c31\"\r\nexpires: Thu, 30 Oct 2025 10:19:08 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\nage: 1484936\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v86MZnts8djM8nvVJLkbGeMSjdlIgNwOachNGgNlwa0q0jD5IloCZcUyfOP%2BYIWy3v7AUSWUo45mFY24hFeYCAvcE%2Beuv4R%2BlJ%2Fr\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 990098468c620b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3121,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"ff14e4812b7f512e620b1ad35542bcfc","sha1":"c40c5f777e7a2f63e7b731b3cdb1fe9c806b23ae","sha256":"c4fb91befcf134b81ecfa1c586e1f9d6426c8f4fc1f6c130ac1fddb49ab5df96","sha512":"59e0276314814c6e033fbc81ab9f2541a86bfb85fc263397d0e3f3c1a0cb0c8e5fe2f833998245462903d8a7e9e499d2685b8fc44964935ad282e4e175753d78","ssdeep":"","tlshash":"84516650b7cc325e06ab22516b6f10ace63cff721158449d881965f82cb0c7bdb6bd6b","first_seen":"2023-03-07T01:23:22Z","last_seen":"2026-05-29T15:41:43.130601Z","times_seen":4766,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"datavaults.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"datavaults.co/images/flags/thai.svg","fqdn":"datavaults.co","domain":"datavaults.co","tld":"co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://datavaults.co/6wr7u4pk4vix/LiesofP.RexaGames.com.rar","date":"2025-10-17T14:48:04.947Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datavaults.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Sep 2025 16:23:45 GMT","end":"Tue, 09 Dec 2025 17:20:31 GMT"},"fingerprint":{"sha1":"E9:01:D8:27:DB:1F:8C:7F:BE:BA:0C:64:25:DB:6D:EB:73:17:E1:07","sha256":"7D:1C:08:25:E2:4B:23:FC:36:97:B2:DD:C9:BD:71:E4:B3:3D:48:12:D8:94:F3:3F:43:16:2E:7B:FB:A6:6C:AE"}}},"request":{"raw":"GET /images/flags/thai.svg HTTP/1.1\r\nHost: datavaults.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://datavaults.co/6wr7u4pk4vix/LiesofP.RexaGames.com.rar\r\nCookie: affiliate=g9ClqAG7KcAmG91Sh2asAAjfWAAOrLYPpYHs4g1%2FhiI2n5P%2F8JtRJVgYp5LrbMpc1uPAXVYULsSVgWFJyV2bhv1V9PNHTqo%3D; lang=english\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Oct 2025 14:48:04 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Mon, 05 Aug 2024 08:34:11 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 26 Oct 2025 20:39:18 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nage: 1793326\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VaoWS6yHe642dFgH63RRTr2lJP1%2BU%2B6QrpfyNlnMffnzltAyUi8YoCIc52MZX%2BNZ4zv4QwaYYPphd%2FtTo1gsOP%2BYUU%2BzNi18rRNC\"}]}\r\netag: W/\"66b08e83-306\"\r\ncontent-encoding: br\r\ncf-ray: 990098469c7c0b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":774,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"be7f38365c4a2c89a63d4853ea4e3660","sha1":"533bc240c9eb357fa187ed371b872c7248728d92","sha256":"0a397e2d5ece5068e61869a9111d733827bd9a2d32c829c853de0ab32dc88e9b","sha512":"177c5c2f66a9ddc6f73ca96e8eebac11da83fa438fc1156d1e9a1d29c0f654e203db97081f6a394965e9c0603e839a94df88a9987b29912aad667f8a25f0f5e7","ssdeep":"","tlshash":"1401bdcdc248ea2e6f9393bccb63e1a1207962c58b0949967a78c5343399de8f14d5cd","first_seen":"2024-09-28T14:33:26Z","last_seen":"2026-05-29T14:54:23.878422Z","times_seen":404,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"datavaults.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://datavaults.co/6wr7u4pk4vix/LiesofP.RexaGames.com.rar","date":"2025-10-17T14:48:05.343Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"89:22:0A:7D:C4:DA:9A:62:E8:BB:1D:75:F2:AF:6C:80:09:53:D0:9F","sha256":"3E:15:EC:D6:31:6A:14:01:07:F9:F2:65:18:42:B3:08:7B:47:93:0C:CE:2C:93:2D:DA:E4:21:74:79:B6:F0:6F"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://datavaults.co\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 8000\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Oct 2025 12:57:50 GMT\r\nexpires: Fri, 16 Oct 2026 12:57:50 GMT\r\ncache-control: public, max-age=31536000\r\nage: 93015\r\nlast-modified: Mon, 15 Sep 2025 16:33:57 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8000,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 8000, version 1.0","md5":"72993dddf88a63e8f226656f7de88e57","sha1":"179f97ec0275f09603a8db94d4380eb584d81cd5","sha256":"f4e80d9dfd374d02989b87a27b5ed4cb78fbb177c27f1478e9a8b0afb7513149","sha512":"7c20165f9d22a86341e841fd58526209017dcde2afe2d0d2a89fe853d95dc69f658d25cf798c71f452dab09843fc808c1ae87a60b1284134163abf5a1d93e50a","ssdeep":"192:GDonmfrEdXT8WrxzRXwyQo3zGEOM7Y2hOMgWnsfYSjv4ENFGwrlKJ:8onPxTzjgyQSzLPXOTIYHJAJ","tlshash":"08f1b0ffa92456c4df692475a5044f27623652b4dd35cb2f496f3e12d2d74224bcc4c1","first_seen":"2023-04-05T18:53:14Z","last_seen":"2026-05-29T17:58:44.17648Z","times_seen":247627,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":63,"dns":1,"connect":20,"send":0,"wait":11,"receive":3,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"datavaults.co/images/flags/german.svg","fqdn":"datavaults.co","domain":"datavaults.co","tld":"co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://datavaults.co/6wr7u4pk4vix/LiesofP.RexaGames.com.rar","date":"2025-10-17T14:48:04.942Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datavaults.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Sep 2025 16:23:45 GMT","end":"Tue, 09 Dec 2025 17:20:31 GMT"},"fingerprint":{"sha1":"E9:01:D8:27:DB:1F:8C:7F:BE:BA:0C:64:25:DB:6D:EB:73:17:E1:07","sha256":"7D:1C:08:25:E2:4B:23:FC:36:97:B2:DD:C9:BD:71:E4:B3:3D:48:12:D8:94:F3:3F:43:16:2E:7B:FB:A6:6C:AE"}}},"request":{"raw":"GET /images/flags/german.svg HTTP/1.1\r\nHost: datavaults.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://datavaults.co/6wr7u4pk4vix/LiesofP.RexaGames.com.rar\r\nCookie: affiliate=g9ClqAG7KcAmG91Sh2asAAjfWAAOrLYPpYHs4g1%2FhiI2n5P%2F8JtRJVgYp5LrbMpc1uPAXVYULsSVgWFJyV2bhv1V9PNHTqo%3D; lang=english\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Oct 2025 14:48:04 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Mon, 05 Aug 2024 08:34:11 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 04 Nov 2025 22:34:30 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nage: 1008814\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Enhg7HvcZzIwlRchv1M%2B5ivt4Q6B1evM5O%2FHX1t%2B9QHucxsSONvmDrvK3Yc00MEzCjOzDWPdHxJIA83eM0N7nlYVg80HH5UOcQHW\"}]}\r\netag: W/\"66b08e83-192\"\r\ncontent-encoding: br\r\ncf-ray: 990098469c700b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":402,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9c33b1ced91f002c6cc9d22834e6d928","sha1":"41685207358282e05bafc1050d54dba2ffd1bb11","sha256":"bd01841f86e031094709ca7b983e96a4c919662568628a3f730ae1ca2964bb5a","sha512":"5b7d62725610b729bb7dee7be38929bb4bc723dd7b90560f6f8bef7862777c63935e078edaa47bdd438bd8213d27941f48daddd95dd8190683bc470da1ac009d","ssdeep":"","tlshash":"c5e0ab10d24d884ca2434770c3a2d2618064b39883d447c89bacb4753105af0b2ea1c8","first_seen":"2024-09-28T14:33:26Z","last_seen":"2026-05-29T14:54:23.881309Z","times_seen":407,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"datavaults.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}