{"report_id":"dbd8f24f-50f4-4037-91e9-0c0144e12202","version":0,"status":"done","tags":["suspicious"],"date":"2026-08-31T11:19:57Z","url":{"schema":"http","addr":"earthmetaai.info/","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"earthmetaai.info/","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"title":"EarthMeta · The deed layer of the parallel earth","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"earthmetaai.info/","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-05T11:19:57Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":13}},"detection":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-08-31","alert":"Detects file containing Telegram Bot API","trigger":"earthmetaai.info/","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-08-31","alert":"Detects file containing Telegram Bot API","trigger":"earthmetaai.info/assets/fonts/benzin/Benzin-Bold.woff2","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-08-31","alert":"Detects file containing Telegram Bot API","trigger":"earthmetaai.info/assets/fonts/pnova/ProximaNova-BoldItalic.woff","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-08-31","alert":"Detects file containing Telegram Bot API","trigger":"earthmetaai.info/assets/fonts/benzin/Benzin-Semibold.woff2","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-08-31","alert":"Detects file containing Telegram Bot API","trigger":"earthmetaai.info/assets/fonts/techchain/TechnoChain.woff","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-08-31","alert":"Detects file containing Telegram Bot API","trigger":"earthmetaai.info/assets/fonts/pnova/ProximaNova-Bold.woff","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-08-31","alert":"Detects file containing Telegram Bot API","trigger":"earthmetaai.info/error_204?t=jserror\u0026level=ERROR\u0026client.name=56\u0026client.version=2.20260821.01.00\u0026msg=writeEmbed%20is%20not%20defined\u0026type=UnhandledWindowReferenceError\u0026file=https%3A%2F%2Fearthmetaai.info%2Fearth_files%2FJ-iGqMEwFjY.html\u0026line=13\u0026stack=%40https%3A%2F%2Fearthmetaai.info%2Fearth_files%2FJ-iGqMEwFjY.html%3A13%3A10711%0A","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-08-31","alert":"Detects file containing Telegram Bot API","trigger":"earthmetaai.info/assets/fonts/pnova/ProximaNova-Regular.woff","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-08-31","alert":"Detects file containing Telegram Bot API","trigger":"earthmetaai.info/assets/fonts/benzin/Benzin-Bold.woff","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-08-31","alert":"Detects file containing Telegram Bot API","trigger":"earthmetaai.info/assets/fonts/pnova/ProximaNova-Italic.woff","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-08-31","alert":"Detects file containing Telegram Bot API","trigger":"earthmetaai.info/assets/fonts/benzin/Benzin-Semibold.woff","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-08-31","alert":"Detects file containing Telegram Bot API","trigger":"earthmetaai.info/assets/fonts/pnova/ProximaNova-Semibold.woff","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null},{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"summary":[{"fqdn":"earthmetaai.info","ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-08-31T11:03:16.771975Z","last_seen":"2026-08-31T11:03:16.771975Z","alert_count":180,"request_count":167,"received_data":6755182,"sent_data":79991,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-30T22:22:21.72184Z","alert_count":0,"request_count":4,"received_data":129820,"sent_data":2268,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-30T22:24:29.229878Z","alert_count":0,"request_count":1,"received_data":16146,"sent_data":600,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"ipwho.is","ip":{"addr":"172.66.175.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-01-29","domain_rank":18239,"first_seen":"2020-06-08T11:52:47Z","last_seen":"2026-08-26T01:54:26.610889Z","alert_count":0,"request_count":1,"received_data":941,"sent_data":453,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"api.telegram.org","ip":{"addr":"149.154.166.110","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"domain_registered":"2003-12-15","domain_rank":206724,"first_seen":"2015-06-25T10:09:00Z","last_seen":"2026-08-27T08:04:57.286019Z","alert_count":0,"request_count":2,"received_data":724,"sent_data":1185,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"socket.streamable.com","ip":{"addr":"13.216.84.185","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2003-10-05","domain_rank":303396,"first_seen":"2017-11-22T01:37:06Z","last_seen":"2026-08-29T12:32:44.058699Z","alert_count":0,"request_count":1,"received_data":224,"sent_data":587,"comment":"","tags":null,"fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}]},{"fqdn":"i.ytimg.com","ip":{"addr":"142.250.178.118","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2007-12-11","domain_rank":436,"first_seen":"2012-10-03T19:11:04Z","last_seen":"2026-08-31T10:23:18.28425Z","alert_count":0,"request_count":1,"received_data":114821,"sent_data":661,"comment":"","tags":null,"fingerprints":null},{"fqdn":"earthmeta.ai","ip":{"addr":"5.196.76.51","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"domain_registered":"unknown","domain_rank":3404815,"first_seen":"2026-08-31T11:03:16.77246Z","last_seen":"2026-08-31T11:03:16.77246Z","alert_count":0,"request_count":1,"received_data":1787,"sent_data":579,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn-cf-east.streamable.com","ip":{"addr":"13.249.8.14","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2003-10-05","domain_rank":218944,"first_seen":"2020-07-06T06:26:07Z","last_seen":"2026-08-29T12:32:43.809871Z","alert_count":0,"request_count":2,"received_data":70621,"sent_data":1948,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-08-30T22:35:21.728174Z","alert_count":0,"request_count":1,"received_data":455045,"sent_data":479,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"earthmetaai.info/","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-08-31T14:38:41.770986Z","times_seen":93342,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/J-iGqMEwFjY.html","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6247dd5d2d787d98a0d5e4966146d550","sha1":"51dcfa67e8318f689e1a4589a9def15c6f9a23bd","sha256":"cbb9ab7439a233ff75c44799819b7a7de5fdb18f4e30f0236430bc751530c211","sha512":"bcdab3f3db437167cf01baaa88913e053ea2ac769bf14381fb70e62ae10544ef8f11c327a24e01218936ae2800ed21453d065820542d1222b87117980536c637","ssdeep":"","tlshash":"92b0922e6c926024a05c1116a01c008a6b8cc9bb83c814a862054cb5ea9a0ba03847b0","size":108,"data":"","first_seen":"2023-08-01T01:42:54Z","last_seen":"2026-08-31T15:26:06.505753Z","times_seen":302006,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/J-iGqMEwFjY.html","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e18eb9d0972d240f1a5456179bb6523b","sha1":"65255f106adcff2907a98e295a8e7a38fe2884c4","sha256":"3d68db2b85d5a2915743399f09dc438963f0c50f68b02df05d47a372661603e8","sha512":"bcd5a6c26fa1f7a77f5614a7b28e238701d698cc0c96ac5d03d97628d8622125cd0cfdaf54b1db96ef25320a3fca7584abd343d67bdfb9f272ca3ef8572b360a","ssdeep":"","tlshash":"d4c04c38402080e98659101c7434fb80bd7d3b973163e047da3c621c65f5d017c94b11","size":134,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-08-31T15:26:06.506354Z","times_seen":265599,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/J-iGqMEwFjY.html","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"12347d552552b7eb8f1aaf47a5774b81","sha1":"4701684cb61e83493e14555659e2cd07ae9aba3b","sha256":"63b85d3cc0ccb498e52cf8dc76db5119713a85031ef4a8e99edd01e403cb08f4","sha512":"a0b95f6914bf92922a13db3f81f5612e2a360e0b3bb0f6ffabbe41623a044d662e27a216d788399cad99c8ec18c5f98f481e602d672de5b3b97d5da8ec930e4c","ssdeep":"","tlshash":"6b41427ea3a4193b45fa787e21af560620726654e0158c0c813e76846cb1a4b21dbf5f","size":2083,"data":"","first_seen":"2026-05-25T17:49:28.102585Z","last_seen":"2026-08-31T15:26:06.507001Z","times_seen":23653,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/J-iGqMEwFjY.html","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"50ec988bda2e7d3a342e6afdecc87fc0","sha1":"efa5eb7252f8e5f909a8c940a16b372b95682be6","sha256":"735e9bd317bea8a7f4f01b01231eb7b4fd60735a0cc51e73b05b6f3d6552afdd","sha512":"e368d935c9db60b3b422173134679db3d025c0b872a323ed2c936b4b469a667638e45904681b2f81b9294dc93b626092683eaacf0494b4305fd4543e43eab42a","ssdeep":"768:dnInhGD4USdzHwLPDi7pnk1JTNwR+YMWTPmqtyoyYUv1MiLnq8Ek4j6ppsSvpqcD:GDxlpPMWHQYsMibqfkPNqHc","tlshash":"ee8342640868a872c4979547ddb9ff3e9cf806790bc9966dbcbb835c01ec6610eaf413","size":86061,"data":"","first_seen":"2026-08-31T11:20:11.775445Z","last_seen":"2026-08-31T11:20:11.775445Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/J-iGqMEwFjY.html","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4e226125e429d79c4c368581aa455eee","sha1":"79fa2f523a0ffb2867b44afef3e154c3dc1fb5cc","sha256":"d50c6291d73f2c5ba6b2dc494e09fe070ea0a6c0c4ce3b3c6bc4156ab944dd72","sha512":"06a7818b0a33701b90d20662e1d1a85f90f78af228c2efcf6717d56f93b7502a5cd540d471f113376717d6bd8a8b0b9f198e16a65d6412f3f946dc0e6c87ed28","ssdeep":"","tlshash":"96c08c69d3040b704270a810ab0b3b4f253700228020c845b210a60038d0b078d703e2","size":145,"data":"","first_seen":"2026-02-05T15:28:48.153036Z","last_seen":"2026-08-31T15:26:06.509131Z","times_seen":117249,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/J-iGqMEwFjY.html","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8501e99db1c76b62dea75ad32747a129","sha1":"791537ba64bbd81ed1644b015c4830d897182fb8","sha256":"25289f89e8785a11e468135cfa545b64462e90a61e62ee0bf9fe2dce0898016a","sha512":"d34b3b6f94043e080daf7804d7305efc1bade1433a80d4c6c547ab1325aceda8235ceea8bd99062a7737401ff5d767d46e4d24a972bfa88e9c6b197947041f77","ssdeep":"","tlshash":"7b1135251b715c27806a296232dfb309b8262372583c91dc8a81e365933661bbc3235e","size":1032,"data":"","first_seen":"2026-05-25T17:49:28.106733Z","last_seen":"2026-08-31T15:26:06.5097Z","times_seen":23616,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/J-iGqMEwFjY.html","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"173a08c5d6adc5c93611a599bcb2c717","sha1":"735a7301e66ae2c3584357f7bf0bf09eefb62df0","sha256":"271e6368679a21c3416e2a0325db33d6bc445d601c72a49914081b5efd0cdf3f","sha512":"cf15a9aa7e406207f3b85c7ab7d6453fd2351616b4dbb2db767ad854f866ae8256045b8cb74948f44d09fedb6c200c56fa2e2ab83d1ab997f5b0068edee7349b","ssdeep":"","tlshash":"b0800000c08a0030c3200c082008c28038802002a8f2002208200000a0032fca0020ca","size":26,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-08-31T15:26:06.510344Z","times_seen":263722,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/J-iGqMEwFjY.html","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6a664cc61ed916a4ba5e96b1b181ad31","sha1":"b7fa4b8982b3153208278b1151c36d145fff358c","sha256":"d44ffda1a9c8f06d6ffb48188c383ce11676397d3eedb498d230d49f4fa5cb0d","sha512":"cfc5271fa43b3faccafe37d81d4028b3f29fc8cc85480ca8c05c741a4f2d5a2d97d15d4065f258dafeba41bf41bb53e154b8774d3249412d4d5b0ae51f6b5aa4","ssdeep":"","tlshash":"e701285c06046dacd905488cc781bb655fac9237ba013125f82f450db6e3ae79931557","size":753,"data":"","first_seen":"2026-08-20T01:17:11.179818Z","last_seen":"2026-08-31T11:20:11.7782Z","times_seen":773,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/J-iGqMEwFjY.html","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5d20bdf07c3c15718870dbb82ee7ed59","sha1":"db1c20b7c865f618329c9011d43ef2b124700cf4","sha256":"1ce97ef0ad35b51e2537030c1299464fe66cb20467c412e5927f1ca290eae2a2","sha512":"bf158ba7ea4cb85b57273e58841531b619733f64731c827cc04a8a6ff7483561597655c55d91bce05c591cb0d2a20ada91a29283e97dac98135ff6410154d5a4","ssdeep":"192:yzEjQfb/aw0nVmvbeN/yh8kYlZVsx1jov7VWpL7MTMt3qYSiEA3Udq6bRXDLNy99:+OQfbSLmvph5YFsx1Mv0h7MTMJqYSWBh","tlshash":"d922d74fa39679ecd7c05599b7636b036cf1812a63082b1988cba0583cdcf5942af9dd","size":10483,"data":"","first_seen":"2026-07-31T16:41:37.618053Z","last_seen":"2026-08-31T11:20:11.778773Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/J-iGqMEwFjY.html","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a1ae3ef497908debf17ceab26fcf7e0b","sha1":"06498a6052a96483c5a20656b9e4309915d38847","sha256":"b009a84749da273e44fe5e87fae57b7f023fb5a019ad498a4fda949ce1e30a21","sha512":"972f1333a499aa0d3c6ec75634eaca1d5bc38a2176def60b8e63cdb20d959301571de8647c95043cb264114437323a72694d3ef167b7051e96606a39359b60f9","ssdeep":"","tlshash":"c3b0220bc2b8cc0a8c802ab8380e000a0ea2e3a00b0a0ab828003220308b030282e0ba","size":118,"data":"","first_seen":"2026-08-31T11:20:11.779425Z","last_seen":"2026-08-31T11:20:11.779425Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/J-iGqMEwFjY.html","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d8fb965e7ead2924508e97e5326bd3b1","sha1":"fae376d0cb54d4433b7bdc9aba04690cd6cb5d27","sha256":"57bb660c2fdf4369ff8e37f99b26963dba87c120b80c443ff3d31e030ab3a0f5","sha512":"c03eb6a1004f9dfcd1f960a6ca70a77932794808f72476b276bb16f02d0a1855fb2d93d07aab7c0c040d4b3c0eb4f861a4c1a9368a27e3a6430e425ff6ed2568","ssdeep":"","tlshash":"8e60000c00000000033000fc0000ccf00300000cc003c0c0000000000f0000c3c00000","size":13,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-08-31T15:26:06.513447Z","times_seen":260389,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/J-iGqMEwFjY.html","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1727937282f174cb35ee611b6eafa43a","sha1":"2e4db03dbdce9807e420ae4124f092eeddf939b8","sha256":"3dcdee6c812494d410ec27a9a3752ddc36b400957af5370aa3c53b2889bc1e08","sha512":"c3d5813968f985ba7587de177daf1d50c14d2049217746570d7868cd772732ccdcfd01930ce00a3232bd8b98c1e1f713047c2f73fa0738d0b9e249f6177f6f07","ssdeep":"768:BvnemoIvzGzipejJdgPEz++g3qWvd7mu5qjdFVKTJnO3ebNTECzI:zrGuYjJCPS++g3q2diFdFVKNiWWCM","tlshash":"8013e11bf7ccbdeaa8100f779a5e99342a581b44006e6dd48291c703668f5efec2f498","size":44716,"data":"","first_seen":"2026-08-31T11:20:11.781322Z","last_seen":"2026-08-31T11:20:11.781322Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/J-iGqMEwFjY.html","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b02eda2fd9f1ee4700d38a58d70012ff","sha1":"f21bbd3a150ea5804a1d8334582fa562d8d40ecf","sha256":"4dede55dcbbb1a58e5e793f013f6c427f2360a71031283f4285e6427d1f62784","sha512":"1449b121f5dcea6b2bce2ecbcf6d6c9c8d8e8c0d5f01cce61fb6878d5aaea0b06d5d19b365ac878021adf38967b3900bb3793da9a0e5815fb2131bfe1a0ed574","ssdeep":"","tlshash":"6ca02233c028c003003c00a000a33202e20883208800a00c030a830830e800bfe8808b","size":63,"data":"","first_seen":"2024-01-05T14:43:54Z","last_seen":"2026-08-31T11:20:11.782649Z","times_seen":39,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-P6QBGXDK3N","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8e3b5841038a8c6679b52004d2eb4455","sha1":"03f20f947b7580f6f883719f253346be23ad6623","sha256":"dd2f7830a7a7051a0aeddf666103d6a07c5cca9d89a9f2cd4a3d3049fc99cb9a","sha512":"2fede970c6e1e28ab7a8e4314d6c267ab89e2c2a98358968869481bc8fe56b1b10b3e4159deebf1bad1ae22a08f957db7eff64a47b788ee75cd9caf7e86965fc","ssdeep":"6144:tP6NcAu4706mInkRDuccUQ/xEkY3UcKZE3O/yQcCk5P0jSHA:Qi1BPIUMZEwyQcRM2HA","tlshash":"5aa419cdb3c674229392f578903f018bb67a69a2b84cc895f28adcd42d3459a4177f7c","size":454441,"data":"","first_seen":"2026-08-31T11:20:11.771266Z","last_seen":"2026-08-31T11:20:11.771266Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"9c5f686c77c4c6cf37c05967ef3663e6","sha1":"728ece80e79789ba230213e05441785ae5bed0f2","sha256":"ae0767c55f9f5a547f0cad3d8b64f3c7cd9f6628790c440d588c77fe23753b6b","sha512":"24371bc8753ed11a06687a2db912e6ab674b81a514edee678fb607411c5c227aa1bbc53ea385fbd48b2df939646e83e8f95174ce2d036689b9aa9c9967b445d9","ssdeep":"1536:twJydHR6icOmFiG41Mu/hn/vH4sCTmRy7iQuCT4hjtqoZl:twIdHR6iXmQG4135nn/s7i3SoZl","tlshash":"0dd32dc49a5bd4d08e1522ded47be809e4285d27ceacf193b92cdec1782df22948753b","size":138085,"data":"","first_seen":"2026-08-31T07:39:45.914121Z","last_seen":"2026-08-31T11:35:24.011059Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8d0f6821e0ccb209e803c259366bcd3b","sha1":"389ded2fc37256d5356fa4543f5c4c0034a14fed","sha256":"bbafe3af30ccab2e2cdc13451cd0c6123ffa72cf2d55703513781c0859717520","sha512":"4845b0d78897757fddf0cfa4d888e35c41cbaef22d41cbe3d51e15b6bb852ae471670a017ad7dd99855e2e770722719958a1c0a48c2bb9429bc33c086d99c93e","ssdeep":"48:3Zt3RT0iLCZXEEt4k7On0KbMVUWnPD2gxV2dgcBelfloWuqFfoWp:3V7k7O0KA+WL2gxMdgcBeYWRAWp","tlshash":"de91f28d82fa07711d53b4b427cb71583235d05b2590da463e8d43451f8936e82f5bde","size":4306,"data":"","first_seen":"2026-08-31T07:39:45.915913Z","last_seen":"2026-08-31T11:35:24.006216Z","times_seen":6,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-08-31","alert":"Detects file containing Telegram Bot API","trigger":"earthmetaai.info/","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d8605dccfd6f04a76e4317347b1932a2","sha1":"dfa100f43d0a9d2df6f9caf662ccc655e8c3d6ca","sha256":"715648dad97f040b860d0ccc0a2020cbf699110bb6f8ca446e41fefe31b118ae","sha512":"a0c8a0e8bb9ecda8af3145df1bd897afaec3b58f1cd28d2eaecec39d65380767b0674661c5e213a364f8eac10179ed28587a576ce17f91671bf542623a712efa","ssdeep":"","tlshash":"7c1161b616e83937f9070292ad1fc803773a7905158b880caa3c09e854b097013fffe4","size":1002,"data":"","first_seen":"2026-08-31T11:03:21.888634Z","last_seen":"2026-08-31T11:20:11.784875Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"59a13eef9e5e0ec7844e58e8b47d54a0","sha1":"0fb2b2059a878b87f8524284d448dd46a4351953","sha256":"c890c150b008d069bfddb86ee2c2e3fe979515939053b4c53fd6853b68e4fe35","sha512":"7fcdb614d30b1141e9a1e134a98e2888007f786f866c24e6383106d3e003f094e72901aa295e7d3450fccf5a249b25b436401a5b9439205da6b0eec8d72cfc80","ssdeep":"","tlshash":"33f0beaf336126ca23ae6ad20796c01d1e72e4ab3002163c575a36ca0cb6f52521b07e","size":494,"data":"","first_seen":"2025-08-01T04:17:54.874483Z","last_seen":"2026-08-31T11:20:11.785614Z","times_seen":3292,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/5e82db1c-51dc-47d9-856c-9f3cb907dfa4","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6b9d383a491fd3dba2b19800fa13a8fc","sha1":"6fa58ae8cdcd061d4c37041a8d1f4cff502c4bc2","sha256":"ec044b44b0678131a0957fa1c1501972bf90f455884f81d55931bae7368c4220","sha512":"9d1ae9921c81edc57d8b547469508220c8cbaa268d8aa8bbfbf13d15846b5aa4f190a95f7b961c1ccb4f589be83bd4c9c070e668eef5342109e0c54377126ddc","ssdeep":"6144:jlMB01xQZvR8Gt1C2Ogss4BOezNykIv+2JnV:iQSR812O7DNykIZJnV","tlshash":"74f4084289e6503ac96b3acdc2eadc01dc0b15434f9c648df94dac55d378b6be1ea378","size":759282,"data":"","first_seen":"2026-08-31T11:20:11.786263Z","last_seen":"2026-08-31T11:20:11.786263Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google-analytics.com/analytics.js","fqdn":"www.google-analytics.com","domain":"google-analytics.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"d39a8679ed70005ee063ea62886141a2","sha1":"52b556cb7bdbe59b9b1ab9415ff905b561b8399e","sha256":"b33ed8fd08f8cf0138f219167d4bb5817f1b09c1d9ac7431e833899ecfff40f1","sha512":"c65e2fe579412ea8ef38d29185f47dec1f4fb871ec28767c104821f1c3368793c4ff577ed58971d27a9bbac97fee734093766954f7e9d2fc0ff1cb687a0ab977","ssdeep":"96:A1VdZYqhPnjpsx4/eTe8qSMbqaQd6VL2Jyt9LdJoyayCVPVD5wdBf2PfCHiUr3:AXdZYqNjpm4yPqSMbqaQGL2QfdDayCZa","tlshash":"3ca1ca9929fb50210233b1bd1bafa918b63895236208dd61bd8c9264af94437d7f1bc9","size":4693,"data":"","first_seen":"2026-05-25T14:46:35.360433Z","last_seen":"2026-08-31T15:32:57.323643Z","times_seen":87863,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/95qk5d.html","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3a5c36752160db5c76376eff1e26402c","sha1":"d7e86b8cad5a92b841ff62fe6015000d15ff715a","sha256":"31903726bb78d90722c9b7779d98d5b5403fa40cfeed44c9add0a8c027392fe1","sha512":"329d8f098fca1f118efd4a02459a16d357f1bd2f323e09c91ec05f6547e0011825dc87a7eb590cfdea1ac7407f88ef95c82a315a58f007a95689542654705e0e","ssdeep":"768:CDhTUBYw/ph4jhdew05b4GMq91nYa5/udbHG+119Zg/JWehJ0czUYoVYeXEpdHuR:CD+Nw05b4Fa1nYa5/udbHG+119EJWS0b","tlshash":"1d0365596afa50308183b5f6569fa10532398007550edf06bc3ef3d82f98a3549baff9","size":39184,"data":"","first_seen":"2026-06-07T19:34:32.363593Z","last_seen":"2026-08-31T11:20:11.787874Z","times_seen":42,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/95qk5d.html","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"740d40d048b5e69972bafdecb0d5df0c","sha1":"85c14022670588b97721ef4799837b9fd448366d","sha256":"9f9933b54670c30f37df97cd339bf16aad18d2c136e103c2c4e0fa8ab7852be2","sha512":"bd425c965869f3ba0fd751042d15c82cf5b85b3676c5c2272ea38aab307d384671efa151e9894ba91131f599d658d3569b1660dbe715bfe060bd775fc5c73dbd","ssdeep":"","tlshash":"eae0f10d343818e185a3b6f733b3551cb466270c2550fc734eac854c240094100af2ec","size":400,"data":"","first_seen":"2026-06-07T19:34:32.364491Z","last_seen":"2026-08-31T11:20:11.788373Z","times_seen":60,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/95qk5d.html","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"353f7e682c1397279f1d6099d6cd7544","sha1":"c0e0bcd54d00b38fbc5a3034d52f461ec3b9bb0b","sha256":"8318af809c79e7a2ea16517fea0718e3d4b5d60042fe593ea5814134dd7b81f0","sha512":"fa108978ae30ab9a137559fd98990cbd03fc74076730803f156a4ac6e70055ea94055b192d8bf0eb8f98a02925c98245bcfc0c423fa7e1c775b85664ee027a20","ssdeep":"","tlshash":"9ac02bcc215a0c7041e72b00cb3fbb00b1013304d8f06d33490923044e30e03d744c10","size":149,"data":"","first_seen":"2026-06-07T19:34:32.365402Z","last_seen":"2026-08-31T11:20:11.7889Z","times_seen":60,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/95qk5d.html","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"95a1e24b095d9bfed06b4e68a56b7b99","sha1":"0af7cb07ddd11c2dd7c01a08a168ea96370d034a","sha256":"0cdb6315e190273ba1f0109e6e2bdc8123015cb13d44cabd3d6c4fc188517b50","sha512":"4eda71e3b4226a79f403d44399e3dba6af7fc7bef194385e96709210167f788da964f39b5e67743786e81efa7fa73921252c3183deb9b340fa864ab5faabed92","ssdeep":"192:FGcVtxXMV3kuVDTTTVYZMWEnZd/Phjqgjo:FGcVrXMVUuVD7VYZMWk/5qgjo","tlshash":"361297137248897725c3f04d640167ce1fbcb713a54c8aad369cde8c5b1ec2a664bfa9","size":9712,"data":"","first_seen":"2026-08-31T11:20:11.789386Z","last_seen":"2026-08-31T11:20:11.789386Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/dc6b2691-133e-48df-865c-6526259522c2","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"97fc15069eed38e41a27393280009d5b","sha1":"f90ce19187b262985ae0ea9d93c4f0c13a46d40f","sha256":"ce529c5bbed1fd1c907e19e6bb40a7d41cfafa44075731be4b507b530a79bc35","sha512":"6849181eacb76fb071de690ca559c6b9852fd5d38819efe94240aac488d16238406af9408eddf48be597836f4a1ce2a360abf2644cbec21d243eddc0288b1416","ssdeep":"49152:O7OwPEZJs1xwW2QUSvhjG+EyY4bfO3xrQanJfCpszVtAbM:F","tlshash":"6ef523467c5ba9b28f484351b4f76d0b65980d1349dcb0cef6a8f9c2346ef6180eb91e","size":3420298,"data":"","first_seen":"2026-08-31T11:20:11.791662Z","last_seen":"2026-08-31T11:35:24.008529Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"6ade8857a438930abe4eb1c0f45ccd91","sha1":"1a9805e255c816401c890e638fd9b754f547f836","sha256":"57dc4724c57689bc6c554fe7006f0f559e99617c2340d6b9cb9fb10d3dfbcbca","sha512":"f048acb32ed63442be06e5d2d5da87adb12fbf21fe9aa84982ec76ce6bfb17bc94bd791fdf39bf6eee3a91e5476a3776a3426f94e9912f4c46d70b95469ce00f","ssdeep":"49152:x7OwPEZJs11wW2QUSvhjG+EyY4bfO3xrQanJfCpszVtuBB:/","tlshash":"a8f523067c5769b2cf484361b4e76d0b65980e1359dca0cef6a8f9c1346ef61c0eb92e","size":3417839,"data":"","first_seen":"2026-08-31T11:20:11.7945Z","last_seen":"2026-08-31T11:20:11.7945Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f278e1582a6b32d6a9a05328bba73b0f","sha1":"02780b645a044990e49787663d3dba06626b1e3d","sha256":"07317dc90130ec69ed8e07a8362168074f9067473354101f361449cff37110aa","sha512":"08463b63ba1654bf203117d8f0c0a2ce4b5d92914ffba7c8ac3d942ff1a812c86cc61d9e840e5f3422c2b22d1b71b1a06b9a6d40d4e4259b32fd8cd40cc8357f","ssdeep":"","tlshash":"55319948a43216904242e8f1c676abeeabe774080574446d349cbec7eff8447e521678","size":1529,"data":"","first_seen":"2025-08-01T04:16:24.221852Z","last_seen":"2026-08-31T11:35:24.011721Z","times_seen":3515,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0e1ee9f442371606d9a13b41a0dbeaff","sha1":"a05c25c8ad9127fe7d45319ce13e8b4a485d2e01","sha256":"713285cbc0cb910dfd2e7a86c604d191a27789ae50964ab1c674507ff4a20c45","sha512":"1dbac9fa1e0b338e780a3600f1a3da140a6c83a961a1d0c6c80fe3dc5a9041c346c471d264a07ccc87457cdccc2a28b768d02283512ba9cee0fc2e2b7124e42d","ssdeep":"","tlshash":"0221fedeb2826488526794d742cd8dceb8e617a919008c20452ef299225c3e8fb6ad54","size":1177,"data":"","first_seen":"2025-08-01T04:16:24.218288Z","last_seen":"2026-08-31T11:20:11.796606Z","times_seen":3406,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/svelte.js","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4d9b2f6b39ea5318eb921c51cdc3ac49","sha1":"faf009f771e46ab2d708a646d11073e27b4e4e08","sha256":"3f6fc78b7a4d3e4e1ce180e92f07ba3ef864800ab037469575f924cd84006983","sha512":"641be645ee2a943f2b3b987d6ed98b2ce3f72174e55c6aa2551034378a50a497b0c5d2d76b7fc604881a23781d9d9b54942fdaf8ac2cd6ba590812dce84a9e85","ssdeep":"1536:E0hivHw7dV3Bdry0HoT7NlNdvvH4KYK+us7OIGuT4/bioFF:E0gHw7vzu0IT7NHdXzy7O92oFF","tlshash":"9cd363c6595bd4d58e1512cec07bec08e4285967ceacf193ba2cddc1b82df22948763b","size":142460,"data":"","first_seen":"2026-08-31T07:39:45.852134Z","last_seen":"2026-08-31T11:35:24.004172Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"3433c9d3e9b7e8e5b34ed72e309db572","sha1":"d53d7df082088749c1df6b08330ee9b9e4076932","sha256":"1d96fa9904e3743570bccd5be90e83fd91975299f374093cc6f723673d582dd1","sha512":"ffd0e047331871f21738643968b7eb7fa045ee0e45346a9ea986c4b8a3e745dd310542c6b2734f6d244408bba6548ec66f5cd7662c69485b5e59e3b9432cdff2","ssdeep":"","tlshash":"06f04245bd825a24d35670ddc41f978cc53690dd91491c4cbb64ece1de94c2cdfc6534","size":585,"data":"","first_seen":"2025-08-01T04:16:24.219641Z","last_seen":"2026-08-31T11:35:24.009651Z","times_seen":3554,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"2380d391cf784bce2f77e0e16fa2268b","sha1":"2b88cb08e3d7f56772d46fe1a10d84774e8728d5","sha256":"e65fcff70fe965f3d1878fe515a7ebcd265dfe61b15461521450c882e8d081d7","sha512":"0f3264af3a045928be20d2ee1ef3af905571d07e3fc25eaeda22199baca89b8c9bff94d90d81124ff45b16c5e40df291c2f49d9464ba901d2d961f6fd1196f1f","ssdeep":"","tlshash":"e6411b1e00aa0aa31ba3054333ce846d0956c2cedcc73534d3b27f8134c67832a93bea","size":2254,"data":"","first_seen":"2025-08-01T04:17:54.882582Z","last_seen":"2026-08-31T11:35:24.010337Z","times_seen":3337,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"a97d6ef5abced657bf5d46b969b239da","sha1":"212f1fc55f39b82d41e88c7628aec3b33d263afc","sha256":"fd3d3ea23ebc1d6ff9299cbe2cc651dfcd714b9be828c8ca2a81540e2f85eaf9","sha512":"6f35480a04c1360f72ae3d1dec34f1357b49fb10a7c7e6de8124e33a87b075127206686daa9145d40be27c4dd761f078d085a1f2538567c714ede67f66122c7c","ssdeep":"192:7mmQewTVPeY8DpuTM3kpVg9LuKXgnudSWXLPKPIlH4SjmnUYsCc0V02Y2pE2XuCh:7mmQewTYY8Fb3kjgTtLPKPIJgcx0V02l","tlshash":"8732c5b06a242ad911d604e20ace4f5d74f591611179dc249b3ef28a2fec3cab7d37a1","size":11308,"data":"","first_seen":"2025-08-01T04:17:54.885074Z","last_seen":"2026-08-31T11:20:11.798371Z","times_seen":1636,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1e21743cd2ee2004cd56bfc5c29e3609","sha1":"bf516634ffbcfd3186b71dafc0ecdcc47894c439","sha256":"0e428980439e794b176e0ee3cd84e4878510b1d52c1efc1c00f4af9729a17029","sha512":"4264e5ce5b4f3acb24046582388132a5915398c9266c18c6349d75fb94bd74bac990dc6ebd12e1e118a3a24752a3e4badae2faabd69b9827d1f223a0750da4c2","ssdeep":"48:atoyTqSsM+c69M+c69M+c69M+c60778KK7NaaM//M+A:atlDNDNDNDl778KKw//M+A","tlshash":"25913f32165427da63ce8fd45a85751d01d2c89a383e60bdff3279eded3a683c031612","size":4506,"data":"","first_seen":"2025-08-01T04:16:24.215618Z","last_seen":"2026-08-31T11:35:24.012423Z","times_seen":3470,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"Telegram:map[actor:server1.conn0.watcher17.process7//obj22 class:Object extensible:true frozen:false isError:false ownPropertyLength:3 preview:map[kind:Object ownProperties:map[description:map[configurable:true enumerable:true value:Logged out writable:true] error_code:map[configurable:true enumerable:true value:400 writable:true] ok:map[configurable:true enumerable:true value:false writable:true]] ownPropertiesLength:3] sealed:false type:object]","filename":"https://earthmetaai.info/","line_number":108,"column_number":21},{"level":"warn","text":"Google Analytics and Tag Manager is being shimmed by Firefox. See https://bugzilla.mozilla.org/show_bug.cgi?id=1713687 for details.","filename":"sandbox eval code","line_number":1,"column_number":9},{"level":"warn","text":"Google Analytics and Tag Manager is being shimmed by Firefox. See https://bugzilla.mozilla.org/show_bug.cgi?id=1713687 for details.","filename":"sandbox eval code","line_number":1,"column_number":9},{"level":"log","text":"Play blocked: NotSupportedError: The media resource indicated by the src attribute or assigned media provider object was not suitable.","filename":"https://earthmetaai.info/earth_files/95qk5d.html","line_number":2140,"column_number":17},{"level":"log","text":"Set volume 0 save: false","filename":"https://earthmetaai.info/earth_files/95qk5d.html","line_number":1025,"column_number":13},{"level":"log","text":"Play blocked: NotSupportedError: The media resource indicated by the src attribute or assigned media provider object was not suitable.","filename":"https://earthmetaai.info/earth_files/95qk5d.html","line_number":2140,"column_number":17}]},"http":[{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/0a2ekjdwbp5-f.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:05.767Z","timestamp":1788175145767,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/0a2ekjdwbp5-f.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:05 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:40 GMT\r\netag: \"6a8bcb0c-803d\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 996\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CDCllX0izxmsa7TLAdXHMtHN%2BsVwadaHKPep63VUBnasHVhhWbLzfyiL4N8YsrxEi9PpR6WRegRQ95O9kwKWtZXo3EhYiP8jPZSXjfYAtuJ7P9DX0Mrvrl9HlrO%2BDdtB8QpY\"}]}\r\ncf-ray: a33ba36508b65693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 32829\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/turbopack-1148z0l907hzt.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:06.145Z","timestamp":1788175146145,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/turbopack-1148z0l907hzt.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:06 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:40 GMT\r\netag: \"6a8bcb0c-299c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 996\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=trsyCVjzfDQyeLUJlUH1S8weDdSp0a%2BlzaWypQHEbANWKHxJHr4uNZnYBAX4b6BIxl0zulGo2M4olLwDAQG3oGmsuJdt%2B8S6vrHItIYR%2BBUP%2B5f2VUR5pmjASfPX%2BYRpOVR8\"}]}\r\ncf-ray: a33ba36768e05693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10652\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/assets/fonts/benzin/Benzin-Bold.woff2","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:06.508Z","timestamp":1788175146508,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /assets/fonts/benzin/Benzin-Bold.woff2 HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/earth_files/0dc69x6pqgnih.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:06 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:40:14 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Oc4BtWCOeSINO0W35uO%2FiqkPhMjhJCXSsIccYhLCAeA5JrMAPripJ4wyTxM7Cs2VW6hSt1K%2BCTJ0N4Ey4qMNFrNuIqKmJ6e9eWpP4KpbPntya%2FoSPzxtHtk7OK55eBhtFkg9\"}]}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\npriority: u=3,i=?0\r\nage: 994\r\nvary: accept-encoding\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33ba369a9025693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":162205,"size_decoded":163095,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (23310)","md5":"bb4228b8762b5c5bd421966fff541995","sha1":"65e0eb176204ecd0b4ec5287e037d4a46f2a12ac","sha256":"852450195ebbef3f796f63c26b85361fd04ca7d8f2e7730640020caff3dae82d","sha512":"686dfaf3f4fddda1a0465ca699f38e162ab542b2b30abc05eb3e832419ae34452ebab286981f7dfa462077d6caf9fb164985ea47373c980595e8928302081d69","ssdeep":"1536:QjuBV0d+y4k0ovf4eGEY0vf4eGEY7Ev3dwsB/kentRIkf0EASgZyAIT/eUQP4xLr:QUK0/wSsB/Dt+XF715FFcLk9aXDFA3d4","tlshash":"49f309b091e2097bb16782d955e1e71d66add20bf4174918f3bc12f62f4aeed883318c","first_seen":"2026-08-31T11:03:21.848022Z","last_seen":"2026-08-31T11:20:11.732732Z","times_seen":2,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-08-31","alert":"Detects file containing Telegram Bot API","trigger":"earthmetaai.info/assets/fonts/benzin/Benzin-Bold.woff2","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/assets/fonts/pnova/ProximaNova-BoldItalic.woff","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:06.710Z","timestamp":1788175146710,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /assets/fonts/pnova/ProximaNova-BoldItalic.woff HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/earth_files/0dc69x6pqgnih.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:06 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:40:14 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bjZ2qxqSXdiDyfYuOy7L%2FZVwxNEGulD9V45W1EbBiil2Ogu60JV10W2uefrxDfL2OjNiqHJlIgXXoyKui%2BgycgrfG2w0Z8hTKPcms0ErpQjpW4iaFFIhXUrJnWXqydwpnex0\"}]}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\npriority: u=3,i=?0\r\nage: 990\r\nvary: accept-encoding\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33ba36af9235693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":162205,"size_decoded":163093,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (23310)","md5":"bb4228b8762b5c5bd421966fff541995","sha1":"65e0eb176204ecd0b4ec5287e037d4a46f2a12ac","sha256":"852450195ebbef3f796f63c26b85361fd04ca7d8f2e7730640020caff3dae82d","sha512":"686dfaf3f4fddda1a0465ca699f38e162ab542b2b30abc05eb3e832419ae34452ebab286981f7dfa462077d6caf9fb164985ea47373c980595e8928302081d69","ssdeep":"1536:QjuBV0d+y4k0ovf4eGEY0vf4eGEY7Ev3dwsB/kentRIkf0EASgZyAIT/eUQP4xLr:QUK0/wSsB/Dt+XF715FFcLk9aXDFA3d4","tlshash":"49f309b091e2097bb16782d955e1e71d66add20bf4174918f3bc12f62f4aeed883318c","first_seen":"2026-08-31T11:03:21.848022Z","last_seen":"2026-08-31T11:20:11.732732Z","times_seen":2,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-08-31","alert":"Detects file containing Telegram Bot API","trigger":"earthmetaai.info/assets/fonts/pnova/ProximaNova-BoldItalic.woff","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/frame-modern.e38d2682.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/earth_files/saved_resource.html","date":"2026-08-31T11:19:07.440Z","timestamp":1788175147440,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/frame-modern.e38d2682.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/earth_files/saved_resource.html\r\nCookie: _ga_P6QBGXDK3N=GS2.1.s1788175146$o1$g0$t1788175146$j60$l0$h0; _ga=GA1.1.1510774643.1788175147\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:07 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:40:12 GMT\r\netag: \"6a8bcb2c-cc005\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 991\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ob2KuQ221RNGGQq1DoyZ9%2FrjZFOC0G7uwpccx%2FS6YLcn1X9KERoQV4DuLzZCrTsScBch5SVCDT%2B3RCpJOnZvsD%2BvWyCI8QrSCTfPxNgcZwJJuTFGaoaWhlqiZTrLAR%2B3QxDe\"}]}\r\ncf-ray: a33ba36f89715693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 835589\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/turbopack-0ajm9eyjbc12p.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:04.918Z","timestamp":1788175144918,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/turbopack-0ajm9eyjbc12p.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:04 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:40 GMT\r\netag: \"6a8bcb0c-297b\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 995\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kO10NloH%2B7gZKAmcNeGgWEkQw%2BMwuuUPFVYzFlP%2BRKvKK5eI7heI%2BZK%2Fj6aMHjqlWe%2FFwMafXehUvhXsoyQ%2FWDxa4yqqXcCbInwYiYkrnKGqQU57kzBE1aMp0pQ2i8rqoA%2F5\"}]}\r\ncf-ray: a33ba35fc8185693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10619\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/0.v34_pf4fh1c.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:05.635Z","timestamp":1788175145635,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/0.v34_pf4fh1c.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:05 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:40 GMT\r\netag: \"6a8bcb0c-be69\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 995\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ivPxYOD9%2FbC5fs6i8t2AHwF0BnpU%2Fecxh4nl575rmYNHibwv5MojqaHA%2FHHj7b76%2FKKlFihsAof5iXSHuTc6278bg4p7qPLEM5gDo7BmMyNDG99JRfX%2Bk5AYe3AzDKnwAXoR\"}]}\r\ncf-ray: a33ba36438a95693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 48745\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/0y755hzgdx8ch.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:05.820Z","timestamp":1788175145820,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/0y755hzgdx8ch.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:05 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:40 GMT\r\netag: \"6a8bcb0c-1257a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 996\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fSjrYHJXXX06m%2BMYk1u01LYSYvxYdnNnQ%2BkwMc2Ushg0E1utBkP88WhlNxzYTAYBtY%2FOCKN%2Bc%2FoPyU2KL%2BoOrXoerUze6ymWyQADhCRGvxUgs0pA7Bzn8SDptSUIVmPl1K7b\"}]}\r\ncf-ray: a33ba36568bc5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 75130\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/assets/fonts/benzin/Benzin-Semibold.woff2","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:06.506Z","timestamp":1788175146506,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /assets/fonts/benzin/Benzin-Semibold.woff2 HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/earth_files/0dc69x6pqgnih.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:06 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:40:14 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LEpZWFlvYYdGvMJfcwsY7kWwn2fb42MohpAXX0545WrfG9kDQoL1acFfZetmV%2FhWfR%2FGy76lVwD%2BIOy6Q8o0l%2B7VjBog1RtNPoQzw5NlD0e3DOGHFCDGuDsKED5hhCVZZHQN\"}]}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\npriority: u=3,i=?0\r\nage: 994\r\nvary: accept-encoding\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33ba369a9015693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":162205,"size_decoded":163097,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (23310)","md5":"bb4228b8762b5c5bd421966fff541995","sha1":"65e0eb176204ecd0b4ec5287e037d4a46f2a12ac","sha256":"852450195ebbef3f796f63c26b85361fd04ca7d8f2e7730640020caff3dae82d","sha512":"686dfaf3f4fddda1a0465ca699f38e162ab542b2b30abc05eb3e832419ae34452ebab286981f7dfa462077d6caf9fb164985ea47373c980595e8928302081d69","ssdeep":"1536:QjuBV0d+y4k0ovf4eGEY0vf4eGEY7Ev3dwsB/kentRIkf0EASgZyAIT/eUQP4xLr:QUK0/wSsB/Dt+XF715FFcLk9aXDFA3d4","tlshash":"49f309b091e2097bb16782d955e1e71d66add20bf4174918f3bc12f62f4aeed883318c","first_seen":"2026-08-31T11:03:21.848022Z","last_seen":"2026-08-31T11:20:11.732732Z","times_seen":2,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-08-31","alert":"Detects file containing Telegram Bot API","trigger":"earthmetaai.info/assets/fonts/benzin/Benzin-Semibold.woff2","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/assets/fonts/techchain/TechnoChain.woff","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:06.509Z","timestamp":1788175146509,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /assets/fonts/techchain/TechnoChain.woff HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/earth_files/0dc69x6pqgnih.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:06 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:40:14 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8BsQmvs5v2XkwCmPCxNMucn%2FvM3vUoSzo6z7Sh60RQCwUtUMspHHrjpK2uE30VuzWdh%2B7iFJnWuzaTZdPTTZfPsPI89o7H3iYWnPo5D7lm2PM4IYsZ7r1p1lZ5EFqa8RKpFs\"}]}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\npriority: u=3,i=?0\r\nage: 994\r\nvary: accept-encoding\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33ba369b9035693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":162205,"size_decoded":163093,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (23310)","md5":"bb4228b8762b5c5bd421966fff541995","sha1":"65e0eb176204ecd0b4ec5287e037d4a46f2a12ac","sha256":"852450195ebbef3f796f63c26b85361fd04ca7d8f2e7730640020caff3dae82d","sha512":"686dfaf3f4fddda1a0465ca699f38e162ab542b2b30abc05eb3e832419ae34452ebab286981f7dfa462077d6caf9fb164985ea47373c980595e8928302081d69","ssdeep":"1536:QjuBV0d+y4k0ovf4eGEY0vf4eGEY7Ev3dwsB/kentRIkf0EASgZyAIT/eUQP4xLr:QUK0/wSsB/Dt+XF715FFcLk9aXDFA3d4","tlshash":"49f309b091e2097bb16782d955e1e71d66add20bf4174918f3bc12f62f4aeed883318c","first_seen":"2026-08-31T11:03:21.848022Z","last_seen":"2026-08-31T11:20:11.732732Z","times_seen":2,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-08-31","alert":"Detects file containing Telegram Bot API","trigger":"earthmetaai.info/assets/fonts/techchain/TechnoChain.woff","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn-cf-east.streamable.com/video/mp4/95qk5d.mp4?Expires=1787788140\u0026Signature=HSlsLbptKhBP2XJSJb-zS8Y2Zx6LR3wSRnTkXWCPiO0oGFaA5rh8qY6EOTZeYCbMFllE0XF-FVJ~TGKNajnQgfnyiE3lkhb8hNW36B-UGsHLDdUiZ1jzyWEXZxJAPI~FWqXKT0Uq6x858QG3ykzDO~ki7gEePQBEaNUmxI4i67nxI9I7OaGeZ5wEBBHCjKnbUxlUHoVDrtvjtu~yvYc9HA4kJcA0hV3nP7GYw~t72gkKx7iRCVmgbrZJvof5LOYIHCuPgN68GogWzcSTrrxKtqRHiZY2DMs4zs02hk~teYxyCWQspgm-dztDDXBwGmRP5O2~DkrNRee9Ke9jNQMXhQ__\u0026Key-Pair-Id=APKAIEYUVEN4EVB2OKEQ","fqdn":"cdn-cf-east.streamable.com","domain":"streamable.com","tld":"com"},"ip":{"addr":"13.249.8.14","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://earthmetaai.info/earth_files/95qk5d.html","date":"2026-08-31T11:19:06.780Z","timestamp":1788175146780,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.streamable.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 10 Oct 2025 00:00:00 GMT","end":"Sat, 07 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"40:58:37:68:0A:97:87:2E:1E:0D:E0:D6:AD:2C:69:DB:BD:64:15:EA","sha256":"2C:65:3A:93:AB:CE:16:E9:07:65:FB:71:5F:89:62:A2:90:82:AF:5F:9F:85:F0:B0:D5:0B:2B:7B:4A:3F:0D:C7"}}},"request":{"raw":"GET /video/mp4/95qk5d.mp4?Expires=1787788140\u0026Signature=HSlsLbptKhBP2XJSJb-zS8Y2Zx6LR3wSRnTkXWCPiO0oGFaA5rh8qY6EOTZeYCbMFllE0XF-FVJ~TGKNajnQgfnyiE3lkhb8hNW36B-UGsHLDdUiZ1jzyWEXZxJAPI~FWqXKT0Uq6x858QG3ykzDO~ki7gEePQBEaNUmxI4i67nxI9I7OaGeZ5wEBBHCjKnbUxlUHoVDrtvjtu~yvYc9HA4kJcA0hV3nP7GYw~t72gkKx7iRCVmgbrZJvof5LOYIHCuPgN68GogWzcSTrrxKtqRHiZY2DMs4zs02hk~teYxyCWQspgm-dztDDXBwGmRP5O2~DkrNRee9Ke9jNQMXhQ__\u0026Key-Pair-Id=APKAIEYUVEN4EVB2OKEQ HTTP/1.1\r\nHost: cdn-cf-east.streamable.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 \r\nserver: CloudFront\r\ndate: Mon, 31 Aug 2026 11:19:06 GMT\r\ncontent-type: text/xml\r\ncontent-length: 110\r\nx-cache: Error from cloudfront\r\nvia: 1.1 d89e87cdae3d84d31773ec1e164f25ee.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: Kiou1WDAa4FjZBjPZLmzB34CGIounMkkbISJ8SZj4JviZcn_gzbFSw==\r\nvary: Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/turbopack-0rvkgbj3g-c6k.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:04.906Z","timestamp":1788175144906,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/turbopack-0rvkgbj3g-c6k.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:04 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:40 GMT\r\netag: \"6a8bcb0c-29bd\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 995\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3Ryqvl2DzTy%2FMARgBsD4nDnUs%2F2WUfztk1ePtW%2BliTFmMhOoSzUEgaZHVejvvmIdYOihPXCbXxfjiuumXtvae5jxoNglXcPGyJzXOdHupc64vqaW7ZF4CyLdtsgYKIvyo6SB\"}]}\r\ncf-ray: a33ba35fa80f5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10685\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-31T11:19:04.611Z","timestamp":1788175144611,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:04 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:40:14 GMT\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npriority: u=0,i\r\nage: 995\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oB0XjgEESNZR7nu%2BfmDQDZOrQ%2Fc%2F2Wv%2BN2No9C4K%2FtkN3I9Wy47oaJndENngkUpJTQJQkNzsYSGeTix2JDj5wjyfigx%2B3G4M%2B6aQTZGKSKZ6ioZPNqvwXiQPtrTdJQPQWcXt\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33ba35dffdd5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":162205,"size_decoded":28129,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (23310)","md5":"bb4228b8762b5c5bd421966fff541995","sha1":"65e0eb176204ecd0b4ec5287e037d4a46f2a12ac","sha256":"852450195ebbef3f796f63c26b85361fd04ca7d8f2e7730640020caff3dae82d","sha512":"686dfaf3f4fddda1a0465ca699f38e162ab542b2b30abc05eb3e832419ae34452ebab286981f7dfa462077d6caf9fb164985ea47373c980595e8928302081d69","ssdeep":"1536:QjuBV0d+y4k0ovf4eGEY0vf4eGEY7Ev3dwsB/kentRIkf0EASgZyAIT/eUQP4xLr:QUK0/wSsB/Dt+XF715FFcLk9aXDFA3d4","tlshash":"49f309b091e2097bb16782d955e1e71d66add20bf4174918f3bc12f62f4aeed883318c","first_seen":"2026-08-31T11:03:21.848022Z","last_seen":"2026-08-31T11:20:11.732732Z","times_seen":2,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":3,"connect":14,"send":0,"wait":27,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-08-31","alert":"Detects file containing Telegram Bot API","trigger":"earthmetaai.info/","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/08cyfbobr65ze.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:04.882Z","timestamp":1788175144882,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/08cyfbobr65ze.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:04 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:40 GMT\r\netag: \"6a8bcb0c-17ede\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 995\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k5ZeDdVOUroKP484BlksxQu7ulACbVIyh4tlFwyeQHwoBTNdTT4bIiesUFdiOiueHhVnJ5osTpgAHci0ynpomImCCyytSed8vvTTQ8TMM9rJCDyktBCMD6nMnupuPOfu3YYc\"}]}\r\ncf-ray: a33ba35f8fff5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 98014\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/turbopack-0470b~-l3les1.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:04.884Z","timestamp":1788175144884,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/turbopack-0470b~-l3les1.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:04 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:40 GMT\r\netag: \"6a8bcb0c-297c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 995\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=55YU2%2BTGkjzRp2oFwz9VLcySLj6nM4OCES0vnBC2GmroTF1E%2F2hrygXYVHGWI8WmN6M5XIa6pkG52cDiIeHcaqlwHnXQczIqDNB%2BMz5dDrsDwtieBV4YQ0CTvkRFHDiGoGHz\"}]}\r\ncf-ray: a33ba35f88015693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10620\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/turbopack-0-5plygqa72a4.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:04.953Z","timestamp":1788175144953,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/turbopack-0-5plygqa72a4.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:04 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:42 GMT\r\netag: \"6a8bcb0e-297b\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 995\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DivPiv2vi8nzyFcoFFYmNaS23WBB5xazg%2B6GvMm61ZarEWoTFVSZJYJSMNI9zC6qj5wraeUKwNHERU2hLPUk9xmir2ukhlfLTaUx0%2Fion%2F3S%2Bfj8asPD6P9nYCOvirQ2cym%2F\"}]}\r\ncf-ray: a33ba35ff83a5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10619\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/0rs3f.o.td4bd.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:05.219Z","timestamp":1788175145219,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/0rs3f.o.td4bd.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:05 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:44 GMT\r\netag: \"6a8bcb10-111\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 995\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FYa2w01mZI%2FgUeeW0RpifQr%2FFUL8yVsGKG9Hg2zSsZShdjif9GyVhzUvlUgcBI4OfEMR0S6OrhguX%2FBcdg8PxqDY5Dc5Kxlxy4WGv7GkRlnYbdZemG3yk6xTwvKkEPb%2BpHzN\"}]}\r\ncf-ray: a33ba361a85c5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 273\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/0dwi31~4fv88q.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:05.234Z","timestamp":1788175145234,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/0dwi31~4fv88q.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:05 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:44 GMT\r\netag: \"6a8bcb10-10f\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 995\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N2HNN9F8h3w6twfnozYoNlAWDQji%2FR6f55HSGYDy2QGdkZagqOHdVDvoMLF%2BFZbNs2JbiLsD81reV5Ul1eUrcKWL%2F9dvuzPUJcfS%2FcJZMjtCPGU%2B8dsuN6fB3ls6kv1PBxET\"}]}\r\ncf-ray: a33ba361b8695693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 271\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/0v3jsmhbxj.4y.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:06.163Z","timestamp":1788175146163,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/0v3jsmhbxj.4y.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:06 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:40 GMT\r\netag: \"6a8bcb0c-10698\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 996\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BiaVmjm0cRNnNasjlZBTcVrr93RooK7aMsp50iKk1%2BVB%2BxPS2CQsL%2Bue%2Bu2Ap%2BIP5DFSxdUFF5HQ5Cj9aAwEBobJ0OtfrJwmQwtRUgErWgO4nYW1ibSCH2rPg4X4n85Nu2w1\"}]}\r\ncf-ray: a33ba36788e35693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 67224\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/0a2ekjdwbp5-f.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:04.922Z","timestamp":1788175144922,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/0a2ekjdwbp5-f.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:04 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:40 GMT\r\netag: \"6a8bcb0c-803d\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 995\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4eN5z9DzY4V5AY5JZrkNudUCW%2FvmSoksalB8pk7W%2F8mSPGkIziK9PAcL1dbflyO9%2F7FCEQdhIOdMDYSbpRkPEoidYPJMSB0BB9ugbXYdGHq0XwfR0B4Sl0bXKI%2BKa8UHCjdi\"}]}\r\ncf-ray: a33ba35fc81c5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 32829\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/turbopack-0-5plygqa72a4.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:06.284Z","timestamp":1788175146284,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/turbopack-0-5plygqa72a4.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:06 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:42 GMT\r\netag: \"6a8bcb0e-297b\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 996\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I%2FBSwr2hyfXqer%2BZiY%2F9dVOHzwYFqtbOpEhb3CPXo2EITHQgkQH21Ts%2FvHQhuT%2F9dn%2FViR4yv3KHwHpCajG%2Bbh%2F0%2FTi4nlh6zXR0tQpuAOxSRVyKLYOoYawzmJ%2B18HNeckei\"}]}\r\ncf-ray: a33ba36848f25693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10619\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/player-0.1.0.min.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/earth_files/95qk5d.html","date":"2026-08-31T11:19:06.643Z","timestamp":1788175146643,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/player-0.1.0.min.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/earth_files/95qk5d.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:06 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:40:08 GMT\r\netag: \"6a8bcb28-361c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 990\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dwmeNQgfMbIHJQM%2BrbF9R%2BpfS98tnPl4DMPipc4pOA0NsaX9ghPwy51Xpheyv0MnBD4MsJJe5uA%2BewAxnTFY2r4sTICBbyq9OsFLSlWXTxmkA3Z17X4D3ggX0VWq3H4Bb9Z4\"}]}\r\ncf-ray: a33ba36a89185693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 13852\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/player-0.1.0.min.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/earth_files/95qk5d.html","date":"2026-08-31T11:19:06.773Z","timestamp":1788175146773,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/player-0.1.0.min.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/earth_files/95qk5d.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:06 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:40:08 GMT\r\netag: \"6a8bcb28-361c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 991\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zd15wotEP5eQIyByG7W2LCmWuEsSDQmV7b4fH8U%2B3tCblRGLRKS2sNJeR4fR9V3AN4A5G0GjmTxa5SDWZDmthdFK%2FdzjEF6acwVUp3NvJhP13OD1mIznyMVZeVlmviBkGzn8\"}]}\r\ncf-ray: a33ba36b592c5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 13852\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/0s8utwhkacwfw.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:05.735Z","timestamp":1788175145735,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/0s8utwhkacwfw.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:05 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:40 GMT\r\netag: \"6a8bcb0c-f4f7\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 996\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ivLxWJpYNCGhYrYPcMYZpFBQAmQiHn64%2FzW3M%2BcoWCHdRxNXlKYg4M0i3KUUm2hSl4USkoW9thVe8BxxbxXkUU2pf8HKXrvFr8xEu1nYF%2F%2FGXWOrD3aPWnpHYsDWuIsxJ33u\"}]}\r\ncf-ray: a33ba364d8b35693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 62711\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/0.a-ubn1vy._9.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:04.901Z","timestamp":1788175144901,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/0.a-ubn1vy._9.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:04 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:40 GMT\r\netag: \"6a8bcb0c-b2ce\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 995\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eshZuYwCZZD6yG6XtzqK2AMOCK2X1drF7IXmqws6hWnutS0qf9NOmsdTRV8zRfhuiEt%2FwB5jqThfv%2F44H7mbPgzjqccSzxtDoJg9b%2F1NE9n3CO2B%2FqCLGIOJsfgJQ%2F7i8EoW\"}]}\r\ncf-ray: a33ba35fa80c5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 45774\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/0yyd6j98n09so.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:04.930Z","timestamp":1788175144930,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/0yyd6j98n09so.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:04 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:40 GMT\r\netag: \"6a8bcb0c-c916\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 995\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FhuNHkyPCLzfyJCX4q5%2BZ2lYLBlAIJmIJqtFVuldSr%2FpAY33u6utYYZEQgbHkkzAYpG76Tuaild93h5yMYbp%2BApgvLC7UdW9x6Op8FuXuGfLazm01doKtlZRhHAYYqwqCnn3\"}]}\r\ncf-ray: a33ba35fd8245693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 51478\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/03q.0ewstw3gs.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:05.226Z","timestamp":1788175145226,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/03q.0ewstw3gs.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:05 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:44 GMT\r\netag: \"6a8bcb10-136\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 995\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xZhkXjSXQl%2F3gW1%2F4SGIa1G4Ze1j%2FH7HZAX8bTM1OciHNcN%2Bi5W7wTz%2B8C%2BsfaoNtCeq43rEYBfWDmLn3kt2734MV5bky%2FD3Z7eZnvEmJvstXthNt53%2BbO87YXPzXEexdN%2B4\"}]}\r\ncf-ray: a33ba361a8645693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 310\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/0xr3~mx18kcp7.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:05.658Z","timestamp":1788175145658,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/0xr3~mx18kcp7.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:05 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:40 GMT\r\netag: \"6a8bcb0c-158fc\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 995\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w1LVKxDXYOwsEJQDJ%2B90bDHkDjv6xBB7FuFDbRaPx7LLWuvO%2Fmj0lYa05CzD1WI9gZVxxoiMihLr3j7DkH53ARn%2FiFZVxc0X6YC%2Fyi2jAuQiJFo2hejEoOWp5qMVsD%2F7hhxZ\"}]}\r\ncf-ray: a33ba36468aa5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 88316\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/08gh3yjg4e5vy.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:06.721Z","timestamp":1788175146721,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/08gh3yjg4e5vy.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:06 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:44 GMT\r\netag: \"6a8bcb10-10d\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 996\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6Qb9cScVs2Nd7KF206HfzOUkFKzZ5TUeaAxkDpmHpQ1dpuc6TLRI3kqcpNOUCIWao3PQMyDpkZLKjKNQtQEVkX3HhwVB3kvr7XmLn%2F4AA%2Fjwf6qOA9ykJ2CnbR24UvS%2Fix%2BF\"}]}\r\ncf-ray: a33ba36b09265693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 269\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/player.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/earth_files/95qk5d.html","date":"2026-08-31T11:19:06.772Z","timestamp":1788175146772,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/player.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/earth_files/95qk5d.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:06 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:40:08 GMT\r\netag: \"6a8bcb28-385a5\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 991\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F%2FqBtiKmm5C15BMzTVyPuzFBiARO6c29yG%2BoVFsaw4onelXa0GNvojkdJmDbhBkTltfDuBDOzeUm0Bmeqj3u8BgJtBRsAaHO4neDriW%2BoXbo1HNBCn0wS3WhxPShhTUApfRV\"}]}\r\ncf-ray: a33ba36b592b5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 230821\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/_buildManifest.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:04.893Z","timestamp":1788175144893,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/_buildManifest.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:04 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:40 GMT\r\netag: \"6a8bcb0c-d3b\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 995\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S17xlRGTgWnmUPbvDzFWFrJiRX62swP7q777q5YqST%2BV9sypukEo6%2FylkRiXb19%2FQr4JEZk%2BDEmYgxzjRfTxO5zpsfopclr4nptpusJiRGoNIg13GSBjeT3AYVGKc9z2POO3\"}]}\r\ncf-ray: a33ba35f98075693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3387\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/0sjrtneaa~ku6.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:04.917Z","timestamp":1788175144917,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/0sjrtneaa~ku6.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:04 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:40 GMT\r\netag: \"6a8bcb0c-d26d\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 995\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=61M3HofDVBFFzPuG5Y1RoWyzV%2FhdEvN7wWzK5YpYzEfKIETDC7ofdN%2FHlZohVFTsfWPa%2FTz1AEvV%2F3c08YHR5WGx55jHu1Y8B9ZeHwnI%2F5hiafYyGBDGEj1rAE7qfK2ZQyT5\"}]}\r\ncf-ray: a33ba35fc8195693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 53869\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/16v_1oqdjj03z.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:05.213Z","timestamp":1788175145213,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/16v_1oqdjj03z.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:05 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:44 GMT\r\netag: \"6a8bcb10-135\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 995\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YdGwbYS2YrNkyxswlXQmJhcWFQTAie26Q1lrYDXga5WqdvAq%2BVFj0wlXXJYVib4yygggLlRzpeEb4pfsWsI7um31yJggAkZxn%2FzLwYRUnd%2BA967JvgJLT731IXyGDsyLzmDc\"}]}\r\ncf-ray: a33ba36198575693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 309\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/0rs3f.o.td4bd.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:07.503Z","timestamp":1788175147503,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/0rs3f.o.td4bd.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nCookie: _ga_P6QBGXDK3N=GS2.1.s1788175146$o1$g0$t1788175146$j60$l0$h0; _ga=GA1.1.1510774643.1788175147\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:07 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:44 GMT\r\netag: \"6a8bcb10-111\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 997\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZQTRE6%2BvXkuBlj3LRoz3MTgOb0nNiKoBXnoFI91buoAiOZxtBlPICbNQXZ5%2FlMU7xP8uOhhm8Y9BOhyWusAjgydRqG%2BWfG1D2LL2unZGgm%2Fh5%2FeUP4Uy1K6oli3H0CVUzuEW\"}]}\r\ncf-ray: a33ba36fe9765693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 273\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/0cf_vsv5x7to8.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:04.955Z","timestamp":1788175144955,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/0cf_vsv5x7to8.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:04 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:42 GMT\r\netag: \"6a8bcb0e-8f92\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 995\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6pyyKQvZYSHO3S217XYaJLdNNpP7GpFEIQYmvJlwe%2B5wi62NQHQF52rj4X2cOb8q4JiVd9RB35eY%2BCwMQnFHq8JlhFDmCE%2Bd%2BPMO9Zx1RLyqe1F82a0iAJkvwa%2FoDit5%2FjIZ\"}]}\r\ncf-ray: a33ba35ff8395693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 36754\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/12k~uv_5kjxbu.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:05.217Z","timestamp":1788175145217,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/12k~uv_5kjxbu.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:05 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:44 GMT\r\netag: \"6a8bcb10-111\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 995\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RQPf%2FQF%2BIJw3g9deh%2BZ1khfrom4JRGAI0rcUB0ojiJq%2FRihRkfoY9sUjLhyMaZVWz5L3Ut%2BtQD63qsdVqxb%2FdrGbDSJ5HFkIdbGx0KYULSoQDI%2FMKjjEslAwGcCd1e5Y%2BKIQ\"}]}\r\ncf-ray: a33ba361985b5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 273\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/0ela-dv7bbkz9.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:05.227Z","timestamp":1788175145227,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/0ela-dv7bbkz9.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:05 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:44 GMT\r\netag: \"6a8bcb10-10d\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 995\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xoMBCOWghHA7m%2BVAoN1DdH5XdqzCcEnL4mQhhp%2FYgqs7FeM8CW%2FFXGzYq%2FnAlQ2RsRKKIr0A48IhCcocLJ94I927ak2lAfv2DnAdRx4QSNywJLGSBrA3nkHuin3WCF5cKQyq\"}]}\r\ncf-ray: a33ba361a8655693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 269\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/0gn768q4h1~m~.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:05.494Z","timestamp":1788175145494,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/0gn768q4h1~m~.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:05 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:40 GMT\r\netag: \"6a8bcb0c-1d4e3\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 995\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Eg8GQMRLZKCCLCId35nyGpg1pVGnLlO2SykZFYNxxYAqgfLTlEUuqpxyQU66ISZyij3i%2BAS0V%2FleeIWCab6%2BP%2Ft1%2B%2BEFnXgCBzfv%2FOb9oVzcMqfSk%2FWmB9BwTFDkGzojdTmq\"}]}\r\ncf-ray: a33ba363588e5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 120035\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/assets/fonts/pnova/ProximaNova-Bold.woff","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:06.709Z","timestamp":1788175146709,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /assets/fonts/pnova/ProximaNova-Bold.woff HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/earth_files/0dc69x6pqgnih.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:06 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:40:14 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kOYK8NoRp3kn3D5rcBsLLJUd%2BgY5iqM2SPbsS0HOYFQpahid3XkhRj%2FzQ7S3vSfJumw57rzaDZ4upxmnjyPPZOjAlWFG7RU43jRawxeFyo2wGodNLVvcVNgqNzEHEA%2BPw7Ro\"}]}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\npriority: u=3,i=?0\r\nage: 990\r\nvary: accept-encoding\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33ba36af9225693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":162205,"size_decoded":163095,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (23310)","md5":"bb4228b8762b5c5bd421966fff541995","sha1":"65e0eb176204ecd0b4ec5287e037d4a46f2a12ac","sha256":"852450195ebbef3f796f63c26b85361fd04ca7d8f2e7730640020caff3dae82d","sha512":"686dfaf3f4fddda1a0465ca699f38e162ab542b2b30abc05eb3e832419ae34452ebab286981f7dfa462077d6caf9fb164985ea47373c980595e8928302081d69","ssdeep":"1536:QjuBV0d+y4k0ovf4eGEY0vf4eGEY7Ev3dwsB/kentRIkf0EASgZyAIT/eUQP4xLr:QUK0/wSsB/Dt+XF715FFcLk9aXDFA3d4","tlshash":"49f309b091e2097bb16782d955e1e71d66add20bf4174918f3bc12f62f4aeed883318c","first_seen":"2026-08-31T11:03:21.848022Z","last_seen":"2026-08-31T11:20:11.732732Z","times_seen":2,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-08-31","alert":"Detects file containing Telegram Bot API","trigger":"earthmetaai.info/assets/fonts/pnova/ProximaNova-Bold.woff","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/m=root,base(1)","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/earth_files/J-iGqMEwFjY.html","date":"2026-08-31T11:19:06.788Z","timestamp":1788175146788,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/m=root,base(1) HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/earth_files/J-iGqMEwFjY.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:06 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:40:10 GMT\r\netag: \"6a8bcb2a-120cac\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\nage: 991\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uu9W87s%2F89Bp14HQOMuoFaOusd7fzP0hzm9D6f6taaedEIs4NOQzDEFwDDvALagHbOXHngKphKq9avr%2F3a7N%2FmpjxwC0C1YHXgUA6j26X9Bc54GYobEZ3%2F%2BqZejtsJ%2FdWwsS\"}]}\r\ncf-ray: a33ba36b79355693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1182892\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/0ma1ilvy~lddm.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:04.885Z","timestamp":1788175144885,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/0ma1ilvy~lddm.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:04 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:40 GMT\r\netag: \"6a8bcb0c-5da8\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 995\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UfuZu19lVSfjDaEVOClxt4Ck8LWKLzvSQYk2tLrQtG4nL1eeHVBSuXMFnKcMhk%2BrDBCG6gE8l4nHg9ToM6yhUL6kNXn3HlucfzGEAiwRLVSK3nrAV4ngzba9XETEm%2FdeHk4k\"}]}\r\ncf-ray: a33ba35f88025693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 23976\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/0iz64tg342lny.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:04.899Z","timestamp":1788175144899,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/0iz64tg342lny.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:04 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:40 GMT\r\netag: \"6a8bcb0c-3a1c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 995\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0TsdwlYKCa5wViX2UvJymAcX8P4mcd7fmYpdKkIj2W2QStcN5Oxjaf2fjBF2%2Fhu4dKX1FF%2FiwaHc3OSvdL15stdPHOP%2FBqmEtkUH9PGmI%2B6RfuU5dR6%2F%2FKgfgyEqr8n0EwDt\"}]}\r\ncf-ray: a33ba35fa80b5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14876\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/0s8utwhkacwfw.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:04.919Z","timestamp":1788175144919,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/0s8utwhkacwfw.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:04 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:40 GMT\r\netag: \"6a8bcb0c-f4f7\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 995\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=51uiBfmeu5AcV5tIetJu1tdIPQ%2BO8hw1vd9TuT3eJwXZvIhju1SwLsbu8MCW1GnWEWwzqdxYxMb66Cl9Ezz7kB2qAKXCDVB642JUNFsYDWJAxxH6ovx3WIrCPGubc2GRapUt\"}]}\r\ncf-ray: a33ba35fc81a5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 62711\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/09xb3iqg~x6rk.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:04.940Z","timestamp":1788175144940,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/09xb3iqg~x6rk.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:04 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:40 GMT\r\netag: \"6a8bcb0c-fb9f\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 995\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xu7RmG%2F3u42QDnHxOhM2Wx36BQpiEpiB4z6mkdlzgaf%2FXmTOG0vzJIH6iww2%2FVL%2Bm4UofjwFqS1vqS8y%2BayMxlJzIOQ%2BUvSGeQDgLqCk00zFN7KK7TFJ%2F%2BAdKbMEUqBTRzcb\"}]}\r\ncf-ray: a33ba35fe82d5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 64415\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://earthmetaai.info/earth_files/J-iGqMEwFjY.html","date":"2026-08-31T11:19:06.718Z","timestamp":1788175146718,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://earthmetaai.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 28 Aug 2026 10:12:28 GMT\r\nexpires: Sat, 28 Aug 2027 10:12:28 GMT\r\ncache-control: public, max-age=31536000\r\nage: 263198\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":40941,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-08-31T15:30:33.572073Z","times_seen":980204,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/error_204?t=jserror\u0026level=ERROR\u0026client.name=56\u0026client.version=2.20260821.01.00\u0026msg=writeEmbed%20is%20not%20defined\u0026type=UnhandledWindowReferenceError\u0026file=https%3A%2F%2Fearthmetaai.info%2Fearth_files%2FJ-iGqMEwFjY.html\u0026line=13\u0026stack=%40https%3A%2F%2Fearthmetaai.info%2Fearth_files%2FJ-iGqMEwFjY.html%3A13%3A10711%0A","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://earthmetaai.info/earth_files/J-iGqMEwFjY.html","date":"2026-08-31T11:19:06.836Z","timestamp":1788175146836,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /error_204?t=jserror\u0026level=ERROR\u0026client.name=56\u0026client.version=2.20260821.01.00\u0026msg=writeEmbed%20is%20not%20defined\u0026type=UnhandledWindowReferenceError\u0026file=https%3A%2F%2Fearthmetaai.info%2Fearth_files%2FJ-iGqMEwFjY.html\u0026line=13\u0026stack=%40https%3A%2F%2Fearthmetaai.info%2Fearth_files%2FJ-iGqMEwFjY.html%3A13%3A10711%0A HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/earth_files/J-iGqMEwFjY.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:06 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:40:14 GMT\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\nage: 990\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ciFodI1kWjiM%2FYyyXxjeDIcRrQcVc6PPOsyKiVffBPEIzRaGWSODUgM3elnMdW7Xq23g9OtnRZwUbAVzblbkQyNy4YFQTeP4vkFFLROPCfIuxdU3yNL5s08cMFNUTDgjS0BS\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33ba36bb93c5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":162205,"size_decoded":28117,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (23310)","md5":"bb4228b8762b5c5bd421966fff541995","sha1":"65e0eb176204ecd0b4ec5287e037d4a46f2a12ac","sha256":"852450195ebbef3f796f63c26b85361fd04ca7d8f2e7730640020caff3dae82d","sha512":"686dfaf3f4fddda1a0465ca699f38e162ab542b2b30abc05eb3e832419ae34452ebab286981f7dfa462077d6caf9fb164985ea47373c980595e8928302081d69","ssdeep":"1536:QjuBV0d+y4k0ovf4eGEY0vf4eGEY7Ev3dwsB/kentRIkf0EASgZyAIT/eUQP4xLr:QUK0/wSsB/Dt+XF715FFcLk9aXDFA3d4","tlshash":"49f309b091e2097bb16782d955e1e71d66add20bf4174918f3bc12f62f4aeed883318c","first_seen":"2026-08-31T11:03:21.848022Z","last_seen":"2026-08-31T11:20:11.732732Z","times_seen":2,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-08-31","alert":"Detects file containing Telegram Bot API","trigger":"earthmetaai.info/error_204?t=jserror\u0026level=ERROR\u0026client.name=56\u0026client.version=2.20260821.01.00\u0026msg=writeEmbed%20is%20not%20defined\u0026type=UnhandledWindowReferenceError\u0026file=https%3A%2F%2Fearthmetaai.info%2Fearth_files%2FJ-iGqMEwFjY.html\u0026line=13\u0026stack=%40https%3A%2F%2Fearthmetaai.info%2Fearth_files%2FJ-iGqMEwFjY.html%3A13%3A10711%0A","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/turbopack-11ygihee~8l.j.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:04.950Z","timestamp":1788175144950,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/turbopack-11ygihee~8l.j.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:04 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:42 GMT\r\netag: \"6a8bcb0e-299c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 995\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2DZQ1Vle5b89%2FnZiQNTVwLMYzGszJ9E%2FKtxhFLNK0c%2F9KneZFuDngEAm%2F2K5aGB0mJ%2F0hjueSrDlaYo0o%2Fl0A7YlwPlDcb3fEFmEdwuChULG0WBPBWIuXHWvp3fnbANnC7lX\"}]}\r\ncf-ray: a33ba35ff8345693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10652\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/ivexbjec","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:04.874Z","timestamp":1788175144874,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/ivexbjec HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:04 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:40 GMT\r\netag: \"6a8bcb0c-1dbe\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\nage: 995\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pNiW%2Bk6GSgt7pQLRmG%2FeaCswhPzdPQhd7%2FX2EGQ1w%2FJYuLsLccgKyJWbcmtQ9lKY3rGWoMM2SzFV%2F7lOm%2FqcSHEnROXrl3CUDEhPADykH4YttCT1ZdqEf1rxdXAfQigIZwPs\"}]}\r\ncf-ray: a33ba35f7ffb5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7614\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/turbopack-15-_estozh_g4.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:05.569Z","timestamp":1788175145569,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/turbopack-15-_estozh_g4.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:05 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:40 GMT\r\netag: \"6a8bcb0c-299c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 995\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EPUOO6bAB%2BYiAIkMYNLmkWlrJoHMy8XcGY%2BnV6GbJ0MNiv97%2BnJ5%2F0WhrLVVq55xO1WezTcDT5ByRJr9rAOR5wbF4JW1oCMEwi1TGRvZR3VXNf8E6MJ4IPRPcY0vkhEYrSlc\"}]}\r\ncf-ray: a33ba363d89f5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10652\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/0_ezj93pgltft.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:05.593Z","timestamp":1788175145593,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/0_ezj93pgltft.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:05 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:40 GMT\r\netag: \"6a8bcb0c-eae2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 995\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F0yWMhUmhayJXJvZj0b2oz9WMQOj19fuFPoCHdw3NI0eGn5Q%2BR77EgaxU7O7AoKphmvSZLiWdNfdKW2nnPIoCYrZASp5gfbdfWqOubphnj4JbtsoTsw81PzNdegqoqxka54Z\"}]}\r\ncf-ray: a33ba363f8a45693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 60130\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/09xb3iqg~x6rk.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:06.090Z","timestamp":1788175146090,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/09xb3iqg~x6rk.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:06 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:40 GMT\r\netag: \"6a8bcb0c-fb9f\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 996\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qUuBTgd3B%2BRRSR3OVie%2BLvO8Znh0RD7wBVX6G9TCndFreEFfVDCNxgz4Sd8KWKddV0o%2FbopMdb2KwGk8tehj3quAJiO5f5%2FDY44CKDsqwgFhSfej3aWYChgDHJmTrL22hygz\"}]}\r\ncf-ray: a33ba36718d55693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 64415\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/assets/fonts/pnova/ProximaNova-Regular.woff","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:06.397Z","timestamp":1788175146397,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /assets/fonts/pnova/ProximaNova-Regular.woff HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/earth_files/0dc69x6pqgnih.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:06 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:40:14 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y58x1MvrdTMl92ijQD2ws2on7uswzNqY%2F7mqayXj5xahfY1zVU4xD5W5xuQUJsIU4qjUNKtg%2BYeuR1VxKYefJv8KY%2BOTDb8RAY%2FFVOVDaBpNYEMIHBrKQBXDwuRCTYGncJkH\"}]}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\npriority: u=3,i=?0\r\nage: 994\r\nvary: accept-encoding\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33ba368f8fe5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":162205,"size_decoded":163097,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (23310)","md5":"bb4228b8762b5c5bd421966fff541995","sha1":"65e0eb176204ecd0b4ec5287e037d4a46f2a12ac","sha256":"852450195ebbef3f796f63c26b85361fd04ca7d8f2e7730640020caff3dae82d","sha512":"686dfaf3f4fddda1a0465ca699f38e162ab542b2b30abc05eb3e832419ae34452ebab286981f7dfa462077d6caf9fb164985ea47373c980595e8928302081d69","ssdeep":"1536:QjuBV0d+y4k0ovf4eGEY0vf4eGEY7Ev3dwsB/kentRIkf0EASgZyAIT/eUQP4xLr:QUK0/wSsB/Dt+XF715FFcLk9aXDFA3d4","tlshash":"49f309b091e2097bb16782d955e1e71d66add20bf4174918f3bc12f62f4aeed883318c","first_seen":"2026-08-31T11:03:21.848022Z","last_seen":"2026-08-31T11:20:11.732732Z","times_seen":2,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-08-31","alert":"Detects file containing Telegram Bot API","trigger":"earthmetaai.info/assets/fonts/pnova/ProximaNova-Regular.woff","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/turbopack-1148z0l907hzt.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:04.944Z","timestamp":1788175144944,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/turbopack-1148z0l907hzt.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:04 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:40 GMT\r\netag: \"6a8bcb0c-299c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 995\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UXMU5g7xFXmEocQwaLL0K7Yy1MgA4LTzmPsewdsomnzYQ1ZShUPMTHjoxVseCxSAdgSKlvDP5CGQ%2FepF8cUXQSKI9hjKxKAdeW7FN2fDOYCkhxpo%2F7Yq%2FFGgsw9usCZBEFwp\"}]}\r\ncf-ray: a33ba35fe8315693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10652\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/0_ezj93pgltft.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:04.910Z","timestamp":1788175144910,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/0_ezj93pgltft.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:04 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:40 GMT\r\netag: \"6a8bcb0c-eae2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 995\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YTmt0DTKYMRmi%2BYDOUhJt2pIBQVYEpdmugZNuyUxpUes94%2FCQdK853p6qu4dSbST5BW528QkjGsMBd7VFNNvqlsDUIaqTChc38e3Qm%2BxR6Bqq%2BChVMr8WOKdZDm8nkX1hvkd\"}]}\r\ncf-ray: a33ba35fb8125693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 60130\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/0sjrtneaa~ku6.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:05.694Z","timestamp":1788175145694,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/0sjrtneaa~ku6.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:05 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:40 GMT\r\netag: \"6a8bcb0c-d26d\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 995\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cc4bqxdOXF7w21xe5e8c00kIOWgdU31U8xgjb%2F6jLp1AQCgKtu0W8krSjR1WBpj6s5vu9ne7mnNCfo9VpIHrpbSNmCdBd6Uo1E27Ti1e8Z1hYJJAA2scpVg%2BEAm5%2BC89TUhu\"}]}\r\ncf-ray: a33ba36498b05693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 53869\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/turbopack-0q3uxrkuy9en6.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:05.751Z","timestamp":1788175145751,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/turbopack-0q3uxrkuy9en6.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:05 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:40 GMT\r\netag: \"6a8bcb0c-297a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 996\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jhpDyI1TdHaZcZRnEQo048FP%2BNAhLdBuwrpr8mMgmgwl%2BupD7odNb4DlknrxZBR6PKcunJG7kA2a%2FAb2MFbRYYr6jxGnF1gXkpGtlkDPYcc7rt%2FluFn2cILDuQHDjuMUX%2Bqk\"}]}\r\ncf-ray: a33ba364f8b45693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10618\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/turbopack-15tm-gvx.y2_j.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:04.931Z","timestamp":1788175144931,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/turbopack-15tm-gvx.y2_j.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:04 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:40 GMT\r\netag: \"6a8bcb0c-297b\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 995\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ho1UPZGku3cERic84PW6R%2BZwyfQL59Dvz9njrQ6UXLIFrYulZ2o28h%2B0wIZvPLSmUIBlvejIQ2ruvojnHvSXIW2anW47RvpgsG03gtyhGi%2F0AkyE2cPV6DGy6x1EeZRhLB3n\"}]}\r\ncf-ray: a33ba35fd8235693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10619\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/turbopack-0jkw0sacv8.ex.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:04.939Z","timestamp":1788175144939,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/turbopack-0jkw0sacv8.ex.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:04 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:40 GMT\r\netag: \"6a8bcb0c-297b\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 995\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9xoDkqtm9Q%2FZNQk4Ik1vN3ocnMIlMZFSuu%2FPMLsouJufr7TLw%2FJwE%2Fq1%2BmrrgfuSnCEbYenFRd%2Fl7vda4HMY%2FZthxge02tI%2Bkt0suyX2AU0kBzoHW96e1yu9QfGc%2B68YgNt%2F\"}]}\r\ncf-ray: a33ba35fe82c5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10619\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/15mpptyeer180.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:04.943Z","timestamp":1788175144943,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/15mpptyeer180.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:04 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:40 GMT\r\netag: \"6a8bcb0c-a8e6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 995\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KSWrVXnRcZLaIewr%2Fb83VVexJJhIABEyVh6k1YlX60X%2F8fsy8E%2F3Vw75rUtRTJ7ueXchrRv5JmWnr%2FwsVDhUpB3gn8rLbtXdQE89NMyEp4qnp2gFlv3AZG0QLAo0xhdUR%2F62\"}]}\r\ncf-ray: a33ba35fe82e5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 43238\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/1013mr7u0853q.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:05.223Z","timestamp":1788175145223,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/1013mr7u0853q.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:05 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:44 GMT\r\netag: \"6a8bcb10-10c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 995\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PnPHipf6umvJ6ZaRO7Qp2RcI704ucUv3M%2F0A7XNtrw7EQAxX9c8Ki1LlkzBa42%2FiSBhyoNt9Eh4skmKk%2BTp2fTfT3y8hQkNgTHy6B133WJrJJOM6Sg9tYXL3qzWjOqOsLEuH\"}]}\r\ncf-ray: a33ba361a8615693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 268\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/OpenSansLocal.css","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://earthmetaai.info/earth_files/95qk5d.html","date":"2026-08-31T11:19:06.635Z","timestamp":1788175146635,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/OpenSansLocal.css HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/earth_files/95qk5d.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:06 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:44 GMT\r\netag: W/\"6a8bcb10-5b7\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 990\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cxTEf58Q0OmrQ400akiXERcNkBjvXySu8cE%2FceCiNo%2FlJgZNdAki3thpTKUvAHv2hlzk38EiK%2FoeQUS4ZBsp3cb7eDW%2BVc5M3zVXbRXHUOiCOuVvVcKdLjJbRdEY3RmmWU8j\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncf-ray: a33ba36a79155693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1463,"size_decoded":1312,"mime_type":"text/css","magic":"ASCII text","md5":"b338111f7c355ce1a0c88829fa0a7366","sha1":"c82ea287e467191d3c996462d68cdd46bda0f322","sha256":"feb474414d4762c8c1ab35647ecc8da901fdd8e971eb6384a58c5a6fe2355efa","sha512":"0bb2a69ae130f0c63fd014033c7f01e8079e2b5912959778aad916cebac412167f2dd482a3b524e63b08bf3879f24772c3bc37b1bfd3a426f7633a4bf0dbd5b4","ssdeep":"","tlshash":"2c31e4818be83d128711055dbbad8a35ca14523e125894e2fe3c47849f76d9cf3d8f9e","first_seen":"2023-05-18T07:09:38Z","last_seen":"2026-08-31T11:20:11.73457Z","times_seen":373,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/0dc69x6pqgnih.css","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:04.873Z","timestamp":1788175144873,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/0dc69x6pqgnih.css HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:04 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:40 GMT\r\netag: W/\"6a8bcb0c-1ee06\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 995\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UCdT8W6D2fpDm1SrSptHJk7Rw7kO%2B1rCtb%2BvSaZH7mSjDYdY1%2FTeLUKdyrhXFqQA%2FAq1sPuQz1V79Vm6S8lfAI98iikI3HoKcnISSV%2B4tcpXSBcCpApf3VKbhEYPRyEto%2BRo\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i=?0\r\nvary: accept-encoding\r\ncf-ray: a33ba35f7ffa5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":126470,"size_decoded":26520,"mime_type":"text/css","magic":"ASCII text, with very long lines (65376)","md5":"8271bfc7594d45bd964c8f0cb27f3923","sha1":"e1a385eecc97c1e798309c9b750684a190e8562d","sha256":"c6f634994aa699a1510b3d8db6d647ea3c8f9ae3c0084f370a05a4d06b954ded","sha512":"a9db85510fad939c848e9b013ae2f25f89039d17e23047b68900ef735338139c5c067f58ee9f098403ff920278050882a092b1a08e2c0c5d4b54a63ca74e2e7f","ssdeep":"3072:uogzIheppY0R5YSOSROchXXmfoMkInC1NmGlevnPHCpJRBmzv6T9VfDoVR+UsfA9:uogzIhepp1R5YSOSROchXXmfoMkInC1+","tlshash":"88c3b6a0b339d53fac3720b2d3aca9cc711db156df166af9ba50212207c67f64e15728","first_seen":"2026-08-31T11:03:21.838955Z","last_seen":"2026-08-31T11:20:11.735759Z","times_seen":2,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/0hylrs08~gh5..js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:04.903Z","timestamp":1788175144903,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/0hylrs08~gh5..js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:04 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:40 GMT\r\netag: \"6a8bcb0c-10530\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 995\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5D4sQZBJvy7kulqVvUUK4EoVDEKq%2FvYTIvRkyYGbxcsxncNUsODdig7hrYkPQ7dwMnjPir3zNe%2BuXqKJmSLkRUU0eVtiWWda70PWaWIVMODX7aKIyOOmGuNYzkRMcP2ci1OR\"}]}\r\ncf-ray: a33ba35fa80d5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 66864\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/032~x9vdaj703.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:04.907Z","timestamp":1788175144907,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/032~x9vdaj703.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:04 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:40 GMT\r\netag: \"6a8bcb0c-ee96\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 995\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yYxPxLnUB4hsifsso29is9zf4PwDoGQhbwIaOasRlg4BNeq968IVmnwvyRzIuXy1XKpa9PJNuvaHYXYKtATyiISKIqFOE%2F2lV2nU5h9vXZTKrkIcjxv74YQmFZnbvw7TyeEd\"}]}\r\ncf-ray: a33ba35fa8105693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 61078\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/0fra7eg5wygq9.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:05.224Z","timestamp":1788175145224,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/0fra7eg5wygq9.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:05 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:44 GMT\r\netag: \"6a8bcb10-111\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 995\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v2W0c3cjESr%2FgMMWLMatLPJklJ88a1feAPNmT7T2dsfkOv%2FtJOmXlbqwXM0aEI7ktzrdmtFdjPPfxnUoLh3CPWmuh086yN9DrQAwI7Ci%2B2FEgiE0uYiPGN5S2CDAr4CnDs9H\"}]}\r\ncf-ray: a33ba361a8625693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 273\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/turbopack-0xe2mu-57f0dj.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:05.617Z","timestamp":1788175145617,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/turbopack-0xe2mu-57f0dj.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:05 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:40 GMT\r\netag: \"6a8bcb0c-297b\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 995\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sGi10xVZaU4w2FBxX1fDjJ577GT55Gvaf6h5AODUXQMPY4cAOsWghhNcvDxy%2BaZtkZdl2EWRsucmD%2B%2FI8IberU%2FjRkjyz21yRz0A%2BcoUpLvnj0hd50ymw4ehOIfQacinMIjF\"}]}\r\ncf-ray: a33ba36418a65693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10619\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/0svpttkul~7i4.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:05.786Z","timestamp":1788175145786,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/0svpttkul~7i4.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:05 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:40 GMT\r\netag: \"6a8bcb0c-efe4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 996\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B%2FHglNEdbBmGVKSfDjSm23U8DA7amTN7pj0jeLkcTqfLfj%2BVv1kbwDtJyn7PkXIG8EjO0I0YXbX808DZsZcRZZzZuFz8hStH2vnkY8o0fyUlbUI%2B%2B7by95CwYP6F4s6Pxw6s\"}]}\r\ncf-ray: a33ba36528b75693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 61412\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/turbopack-044n1.czr4gc_.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:06.019Z","timestamp":1788175146019,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/turbopack-044n1.czr4gc_.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:06 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:40 GMT\r\netag: \"6a8bcb0c-299c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 996\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OjLtTsIpr5JRsI7ybItvsHmHEduPJ4s4McjveU7GONzILmC9MhfOTlotvcdE5xODZTO7IUQEF38VtJPVqMXAd5oCV46sWexC5bBcnx8G05Wz1QJSQcFK0oZwdOFUnJ%2FFQAGZ\"}]}\r\ncf-ray: a33ba366a8d05693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10652\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/geistmono/v6/or3nQ6H-1_WfwkMZI_qYFrcdmhHijks9bA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:06.505Z","timestamp":1788175146505,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/geistmono/v6/or3nQ6H-1_WfwkMZI_qYFrcdmhHijks9bA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://earthmetaai.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23156\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 26 Aug 2026 11:01:39 GMT\r\nexpires: Thu, 26 Aug 2027 11:01:39 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 08 Jun 2026 16:32:04 GMT\r\ncontent-type: font/woff2\r\nage: 433047\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23156,"size_decoded":23969,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23156, version 1.0","md5":"101f830f66bde67d6f815e42ed6c6f10","sha1":"9b4584e63a1554a356f3c6ad4dc7b98a034313b4","sha256":"c9b2702d0ff5865fcf7ed9442ec95888830b0065682ca4f2b44e2fa3b3a4f269","sha512":"94ba8955bef6c9ba90cd9a1ac2ebe06e6574ba2a567f0d246b79e9872d538d12bb20d3c56e67a7e5a2f36d82306ab0ca09ce315cbd171c66d471af434206edc5","ssdeep":"384:Nmb/KM+jEhKHk2xFO40A1ncGNcx18I+3Qiuo187cwcr5RIqUtshyqAeWeM6r2uOR:NaKLjEg9JbczZwQho18Awcr5RIxtsIeK","tlshash":"2ea2e129cb41eb14610048e86b820c4b3fb47d1b30835aee6452bdbaa4f2cbd175e5fd","first_seen":"2026-06-09T00:53:20.653285Z","last_seen":"2026-08-31T11:20:11.736436Z","times_seen":895,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":33,"send":0,"wait":18,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/05u9wykhv1omo.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:04.935Z","timestamp":1788175144935,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/05u9wykhv1omo.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:04 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:40 GMT\r\netag: \"6a8bcb0c-165fc\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 995\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=noHRse8nYZVBvmP1k%2FgAXbGrRcPkli6FkFY%2Bk9LPjIiSZkjdVlH1vjPcKEFOKGlSIKqyv6Bne7l%2B1LL5CmOJkV73w5VmLnx5TFe9WtkC0T6zfU2FDCVQmy24zXK7b8rXZtx6\"}]}\r\ncf-ray: a33ba35fd8275693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 91644\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/0hylrs08~gh5..js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:05.475Z","timestamp":1788175145475,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/0hylrs08~gh5..js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:05 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:40 GMT\r\netag: \"6a8bcb0c-10530\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 995\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zMaFMvJobPdUBdPpnw52JNNVeanEGJaABRgiov8yrnv2AGc6dNNLgBwkA%2Bgbq1p0S7vwqrBpwelR04glrTINYcyJDmZixLTbKf33qwKMPQG%2FNUmUQDGTRJCSMA0TL45MwKXc\"}]}\r\ncf-ray: a33ba363388a5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 66864\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/95qk5d.html","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:06.557Z","timestamp":1788175146557,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/95qk5d.html HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:06 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:40:14 GMT\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npriority: u=4,i=?0\r\nage: 991\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JGze5aCMKtNx6%2BEdPz%2B4skALvKv5BENZcwO4g6QA0wxVCkZSBzSIgOQBgAO3zF7GGC%2B%2FZcTa%2FAH3XycpFpGiqRvwvf8FcBNWwtd1jxG4pqjBZIgcqbvKhujeA6mzQlPrXmwx\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33ba369f9085693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":83908,"size_decoded":22064,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (2153)","md5":"2fdb8b493da74101c386b5efed3ca36e","sha1":"9ab1098e34d559f50640594ead9125504b00bf95","sha256":"2fd14c800345e10d54333344efa552fc907a91da0798c8166d7bab631ad4d53d","sha512":"97dc7cc2250c62ab04058b3cd5300f7e9a7f26868794bf9378bba52c4f34b0602f2ffdcea1afe6d6b4b4a05dc2930476c3911e981a09d8f1fe3d3c70920a55c8","ssdeep":"1536:8FQEzr5hWNAXKI7JSf9lD+Nw05b4Fa1nYa5/udbHG+119EJWS0czdoVYTHuJrJhT:HEKNNMe0ea5/udb12JLHWh2tVk","tlshash":"2a83089966e910204143f5f96687a305373c8003950ecf6ab97db2cc6fcdea94867fe9","first_seen":"2026-08-31T11:20:11.737211Z","last_seen":"2026-08-31T11:20:11.737211Z","times_seen":1,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/16v_1oqdjj03z.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:06.599Z","timestamp":1788175146599,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/16v_1oqdjj03z.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:06 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:44 GMT\r\netag: \"6a8bcb10-135\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 996\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ahc5SfNWNxnp%2BbfNyP8ekuS33NtLERZzEF2BUBmR7pQLrFTrWVGyOS8Fbd6zDSmKMMlYB%2Bsa16uvnHbsAC7imnpGSm3jTn2CRoZDPG8Vu%2B6v0GI1tHZWLuP5UXSitBJFiXNI\"}]}\r\ncf-ray: a33ba36a490d5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 309\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/player.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/earth_files/95qk5d.html","date":"2026-08-31T11:19:06.642Z","timestamp":1788175146642,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/player.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/earth_files/95qk5d.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:06 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:40:08 GMT\r\netag: \"6a8bcb28-385a5\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 990\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Gg%2FelVF6ok2%2BXyEBoqQORdDjaFcHtUuk53EdIYYA0%2FKngFNaQtqg9Tg%2FbcEETldsSr6DhfJUNELo2zZ28Ju9gAlJxqgJPWu5UlbhnUlvy7iwfv52cnczGNtbf%2FR68eF1HWUR\"}]}\r\ncf-ray: a33ba36a89175693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 230821\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn-cf-east.streamable.com/image/95qk5d_first.jpg?Expires=1787536140\u0026Signature=O2ECec2F60wqJs9nEmore2ji-JiRbebyVCiYUKjViJ5oxxiL~zg07spsohebU-yIS4Cas6P2TV8wtKxKX5Lrjv4aJLLK0zmyLqDotYKLgj3DuTIN9Nrp2iqPzuMI7BTMIwQPoWbmg70lNXD7VachFmn649DJj7DtU3vGm3WlJt2XV1L4v5g6VQhhLYlUAYCknDfdN61vt6nCilT6XnehTAHCIXp5exENF1jMHoc3BX2lVhMhlVMYyK03oebspwDMKwrr~Jr-MlcpyQKwPjrcTFMPqMOItPPZpFuzVUd5p~MOnwkYoxLZ8PAJZW-1iBaKPsIDT31o~-2iFrEZ6nPEqw__\u0026Key-Pair-Id=APKAIEYUVEN4EVB2OKEQ","fqdn":"cdn-cf-east.streamable.com","domain":"streamable.com","tld":"com"},"ip":{"addr":"13.249.8.14","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://earthmetaai.info/earth_files/95qk5d.html","date":"2026-08-31T11:19:06.650Z","timestamp":1788175146650,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.streamable.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 10 Oct 2025 00:00:00 GMT","end":"Sat, 07 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"40:58:37:68:0A:97:87:2E:1E:0D:E0:D6:AD:2C:69:DB:BD:64:15:EA","sha256":"2C:65:3A:93:AB:CE:16:E9:07:65:FB:71:5F:89:62:A2:90:82:AF:5F:9F:85:F0:B0:D5:0B:2B:7B:4A:3F:0D:C7"}}},"request":{"raw":"GET /image/95qk5d_first.jpg?Expires=1787536140\u0026Signature=O2ECec2F60wqJs9nEmore2ji-JiRbebyVCiYUKjViJ5oxxiL~zg07spsohebU-yIS4Cas6P2TV8wtKxKX5Lrjv4aJLLK0zmyLqDotYKLgj3DuTIN9Nrp2iqPzuMI7BTMIwQPoWbmg70lNXD7VachFmn649DJj7DtU3vGm3WlJt2XV1L4v5g6VQhhLYlUAYCknDfdN61vt6nCilT6XnehTAHCIXp5exENF1jMHoc3BX2lVhMhlVMYyK03oebspwDMKwrr~Jr-MlcpyQKwPjrcTFMPqMOItPPZpFuzVUd5p~MOnwkYoxLZ8PAJZW-1iBaKPsIDT31o~-2iFrEZ6nPEqw__\u0026Key-Pair-Id=APKAIEYUVEN4EVB2OKEQ HTTP/1.1\r\nHost: cdn-cf-east.streamable.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/jpg\r\ncontent-length: 69708\r\ndate: Sat, 01 Aug 2026 02:42:50 GMT\r\nlast-modified: Mon, 27 Jul 2026 08:38:42 GMT\r\netag: \"9c1a3c02749b3ff3874261420a2c25a8\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=315360000\r\ncontent-disposition: attachment;\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 d89e87cdae3d84d31773ec1e164f25ee.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: DU4XLOmh8k8f3O3FQhH99T3kD3GVvEkyoaOmQdpx1luF0h9AQ3YrSw==\r\nage: 2622976\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":69708,"size_decoded":70272,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, comment: \"Lavc58.134.100\", baseline, precision 8, 3840x2160, components 3","md5":"9c1a3c02749b3ff3874261420a2c25a8","sha1":"be1089a6f87f5e0fa24c5606ca182d99f75127fa","sha256":"6b00239443e6bd475a51a66bc7fe7bc6566d9a920834e4c35d41e680bd0bb438","sha512":"89db245b5aaaa6e5768081704093b71f0e00625e1eaead3fd5069f9f37d71527c7c5e50758b0949ddaeb0dde89a94509b362cecf6c0c7ffe7a99511351e00e3e","ssdeep":"768:Kvg7qOASyVRP2D7fxZeR2haCa6iobXNhP7ip2EmO75MZhAk7:3yVcD7fx42hna6/Dro3mO75MIk7","tlshash":"9b63a527eb02926ac4dc137498eb0f1c3f7244b5d36a850397a908395dfb38c7d9e6a1","first_seen":"2026-08-31T11:20:11.739508Z","last_seen":"2026-08-31T11:20:11.739508Z","times_seen":1,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":2,"connect":10,"send":0,"wait":12,"receive":9,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/base.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/earth_files/J-iGqMEwFjY.html","date":"2026-08-31T11:19:06.659Z","timestamp":1788175146659,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/base.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/earth_files/J-iGqMEwFjY.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:06 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:40:10 GMT\r\netag: \"6a8bcb2a-18909e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 991\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TlCXA0L3DOhISb6DCLD73uH86%2BhtjeisC4r%2FuAKzKnIk8s9QqGguA2zm8Ee9hqofhkPOUCUrFlRkCsAUrcpZg7KSZ9jcPipDd3QArT8IIUWAXeqDkj4t%2F9ICcoJIU7wBuOGG\"}]}\r\ncf-ray: a33ba36aa91e5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1609886\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/0w4xql6dyl982.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:06.942Z","timestamp":1788175146942,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/0w4xql6dyl982.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nCookie: _ga_P6QBGXDK3N=GS2.1.s1788175146$o1$g0$t1788175146$j60$l0$h0; _ga=GA1.1.1510774643.1788175147\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:06 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:44 GMT\r\netag: \"6a8bcb10-10e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 996\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0ZdaKPBKWZ0aYvkj6euTjgwIx1KAifIeLf9F5%2BXqlq%2FSm%2BmUKTchNRe1HvBylnnoUvSdtRnzbcgt%2B%2FvxVysp3lDNQiSqJ8uY7iluZTr0uuHE%2B1PzGzlIcJ104LHflU8g0Uhq\"}]}\r\ncf-ray: a33ba36c69495693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 270\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/0xpploelenrcc.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:04.888Z","timestamp":1788175144888,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/0xpploelenrcc.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:04 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:40 GMT\r\netag: \"6a8bcb0c-111a2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 995\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=erbqSPuKIpAuqrXeC80bNQdOTjFpRbA62Bdq339X0fCBdauNQJSyG3tlL0KeeMyr7qGCR9ZfS%2BfN4IEf7Dedd9ZaM1Yyw5OfhKKVQ%2BxO3oXmspsacCVih00gyqr3E5mRKOAt\"}]}\r\ncf-ray: a33ba35f88045693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 70050\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/turbopack-01w6br62u27mi.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:04.947Z","timestamp":1788175144947,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/turbopack-01w6br62u27mi.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:04 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:42 GMT\r\netag: \"6a8bcb0e-299c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 995\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H4ETcOeW11Y2ni%2Fqk%2BSh%2F6K4JKsp%2Fva0gznyzH%2B%2FFiIhYFsFS3MLghpy0e%2FX1t7fMt8tFGLUy2TY94xFFx2QuJaLhEdsCfJhYxZTkBK2xY0nJmT5WP8ipYRJQKYv4101NSju\"}]}\r\ncf-ray: a33ba35fe8325693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10652\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/10nv01z0qg9_o.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:05.210Z","timestamp":1788175145210,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/10nv01z0qg9_o.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:05 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:44 GMT\r\netag: \"6a8bcb10-158\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 995\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BWiYACtzPKqqpP7F4219Nn5Sn%2B6OSxxlTAdGPsLBfzz5zyt%2FcodMHCIaIzOd%2FxKBCNeMf0JgqAl3EWg%2BcBgJZEmMgpuIbQplFETNs6wiUzTV7R3rJek27MliQnWq311ivVHS\"}]}\r\ncf-ray: a33ba36198565693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 344\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/08gh3yjg4e5vy.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:05.214Z","timestamp":1788175145214,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/08gh3yjg4e5vy.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:05 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:44 GMT\r\netag: \"6a8bcb10-10d\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 995\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fg9YFsnCmSnFPk4rvLnp8tO3czatkPBY0VOv6RjTn3SMWUOKu6swdxtV0UQxxLY1jjvAzwWOPER%2FVD2GCx7SeuNgS3op2NT%2F1X3l8Th3AWZbBcSH2jFdgIScHW8iINuNlbbC\"}]}\r\ncf-ray: a33ba36198585693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 269\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/18ckf~plmmr40.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:05.230Z","timestamp":1788175145230,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/18ckf~plmmr40.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:05 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:44 GMT\r\netag: \"6a8bcb10-136\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 995\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ELX2fUvH6NY5iPy8PhT%2F12u6m2Q3467OvQwVmrBHdZOjBZdrzlYlGIoB4ePnkXN23WG9BPLBk4pZ28Z6MCFQzfsYaAto7EFpsCLUM7taMY0c4%2Fxrkn%2B4T6GML7gWduCdL9MI\"}]}\r\ncf-ray: a33ba361b8675693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 310\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Instrument+Serif:ital@0;1\u0026family=Geist:wght@300;400;500;600;700\u0026family=Geist+Mono:wght@400;500\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:05.408Z","timestamp":1788175145408,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css2?family=Instrument+Serif:ital@0;1\u0026family=Geist:wght@300;400;500;600;700\u0026family=Geist+Mono:wght@400;500\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 31 Aug 2026 11:19:05 GMT\r\ndate: Mon, 31 Aug 2026 11:19:05 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15462,"size_decoded":1656,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"2903072c3a331d0a285d74c354302776","sha1":"4f934677116cfcb128f9e89a72a1fccb36b65134","sha256":"992ba8a27ea861c2b3b741cdd2a700340d7631f09136e4d8be8373d2b290e660","sha512":"c0fa242b9305cda1a2aef9a37b0b35e206850b19b12f356228c0b66d4fcacaee8d99eb5eda9e89b6ceabf842693457f9869c9d35babea5c0d4ed25cbbc863e78","ssdeep":"192:6tKJLVtkXtrJqotZwtEJZvtqptNJgStH6tOJHBtgogkj3AzktiygLc3AsLtR3Ov1:SQC14+qzs8gYA3IA+dq","tlshash":"1862cb91046bd400eb931cc237cf7e76ae8e60157444d57eabfe08ecacaac26536572d","first_seen":"2026-06-12T04:02:11.668146Z","last_seen":"2026-08-31T11:20:11.740641Z","times_seen":9,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":36,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/assets/fonts/benzin/Benzin-Bold.woff","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:06.577Z","timestamp":1788175146577,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /assets/fonts/benzin/Benzin-Bold.woff HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/earth_files/0dc69x6pqgnih.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:06 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:40:14 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KY1iY1mtX3ZFNPgCOfRhVWLI1XnCAzdEiZKY7sNE26iRljZPML4ceCbA3rRZ%2Bo8maX7aTXGpXmTZTLWomOgL%2BNlXD%2BeQCrsOZkwJM1ISI6QIlbh5EPPnHCdxQGbFAXJuHtyT\"}]}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\npriority: u=3,i=?0\r\nage: 990\r\nvary: accept-encoding\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33ba36a190b5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":162205,"size_decoded":163095,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (23310)","md5":"bb4228b8762b5c5bd421966fff541995","sha1":"65e0eb176204ecd0b4ec5287e037d4a46f2a12ac","sha256":"852450195ebbef3f796f63c26b85361fd04ca7d8f2e7730640020caff3dae82d","sha512":"686dfaf3f4fddda1a0465ca699f38e162ab542b2b30abc05eb3e832419ae34452ebab286981f7dfa462077d6caf9fb164985ea47373c980595e8928302081d69","ssdeep":"1536:QjuBV0d+y4k0ovf4eGEY0vf4eGEY7Ev3dwsB/kentRIkf0EASgZyAIT/eUQP4xLr:QUK0/wSsB/Dt+XF715FFcLk9aXDFA3d4","tlshash":"49f309b091e2097bb16782d955e1e71d66add20bf4174918f3bc12f62f4aeed883318c","first_seen":"2026-08-31T11:03:21.848022Z","last_seen":"2026-08-31T11:20:11.732732Z","times_seen":2,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-08-31","alert":"Detects file containing Telegram Bot API","trigger":"earthmetaai.info/assets/fonts/benzin/Benzin-Bold.woff","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/12k~uv_5kjxbu.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:07.444Z","timestamp":1788175147444,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/12k~uv_5kjxbu.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nCookie: _ga_P6QBGXDK3N=GS2.1.s1788175146$o1$g0$t1788175146$j60$l0$h0; _ga=GA1.1.1510774643.1788175147\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:07 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:44 GMT\r\netag: \"6a8bcb10-111\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 997\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mGgJURrHM7Jh1plpOOeRVYgzmopcWDngR%2BHcesRue7AehWwCEkY0dlK9Kv34KSRpPGHlX4WlHfkHbe3%2BGCJcW2u84iNWJw5nz8gbD%2FPtHyMpcV6AYqMi4NaatbacXyZozXHi\"}]}\r\ncf-ray: a33ba36f89735693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 273\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/turbopack-189etcromc_6w.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:05.881Z","timestamp":1788175145881,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/turbopack-189etcromc_6w.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:05 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:40 GMT\r\netag: \"6a8bcb0c-299c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 996\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Brnaqf6QTX6lAPLino%2BQF4X0YPWwvojPhbxn2s1w381t%2Fc4zhXWZ5mslgMvGtYA6d8AJWFT5Y4votVJa6jOirI22C05f%2FDW4F37FNEIPPfP41BNAwiRiUCvm8bvmj3zyRaiz\"}]}\r\ncf-ray: a33ba365c8c15693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10652\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/16a1a1zc~h402.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:04.890Z","timestamp":1788175144890,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/16a1a1zc~h402.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:04 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:40 GMT\r\netag: \"6a8bcb0c-158fc\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 995\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9V1qtPKcG7o7JrSaLbE4d47Vo4j9nU3DRV5tvdYuVvVihZ6rCe%2FZMtx1XAzeqAjckx7MIQQbcQvVlNFA4PTk96RCTCHP%2Fb5aSh5iNINqJyZDzgX24rlkSahE2uQXX%2FIoyV3y\"}]}\r\ncf-ray: a33ba35f98055693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 88316\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/0y755hzgdx8ch.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:04.927Z","timestamp":1788175144927,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/0y755hzgdx8ch.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:04 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:40 GMT\r\netag: \"6a8bcb0c-1257a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 995\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7cQYQ4HWHF4njG%2FC%2FmhMa5sYvs34xJ3jx7oMumg%2Bts0uWuLHUARSMoE0JFFLIEk1tgjvmSpExf6oCeDeR1qcxihZWGeZRwjVe7xJU%2Bxz7GoO7qNaiHUhC1V5b0NqHDzKduDm\"}]}\r\ncf-ray: a33ba35fd8225693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 75130\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/turbopack-0rvkgbj3g-c6k.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:05.514Z","timestamp":1788175145514,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/turbopack-0rvkgbj3g-c6k.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:05 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:40 GMT\r\netag: \"6a8bcb0c-29bd\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 995\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UQ8oq8giFlbOjs20L3Sh84mQTnPKMI9pSgT%2BjTokcn4qlIh6BYHH2ovhude80acGzVWI%2F12bWRmPwCdGHE4AU08qTTyf0D%2B6ZFBfrJ8GZn5Yvqh9q0f18OVnTdWzfebsi2%2Bs\"}]}\r\ncf-ray: a33ba36378975693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10685\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/15mpptyeer180.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:06.126Z","timestamp":1788175146126,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/15mpptyeer180.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:06 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:40 GMT\r\netag: \"6a8bcb0c-a8e6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 996\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j7jCKALnDUf6hCoz%2FA4qGR3UT58PXPpazRS9ltW8fzjmNWASU1MLz9akpuavk4KIRM8m6kiWuw%2B4UHxM7I0UAOB1SELbGofFSnJTyVAU3AeViuXSrjqtr25SweSL%2BPOgtCQT\"}]}\r\ncf-ray: a33ba36748d95693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 43238\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/0xvg53ngpa_zq.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:06.353Z","timestamp":1788175146353,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/0xvg53ngpa_zq.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:06 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:42 GMT\r\netag: \"6a8bcb0e-e4ef\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 996\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AqYAjQDg2o4cJpJ58yNm9iG0dsze9Opo16F6fUBL1bwqAOFYAJv4Ef3r6K5E6zNVMGYRcIds2fPqWHQH1fX7lWJmlc%2FOtg%2BGpF%2FEL5bVV%2BpaDvhUOTuY%2BabU7ZNA7N1xwkAh\"}]}\r\ncf-ray: a33ba368b8f75693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 58607\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/turbopack-0bferx3h1q2k9.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:04.933Z","timestamp":1788175144933,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/turbopack-0bferx3h1q2k9.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:04 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:40 GMT\r\netag: \"6a8bcb0c-297a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 995\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RzeITtT4WSZXNJ90qoJ5Lux7J%2FOMYte9V%2B6UPih9YrBquRM8qy29XJ92dTfLSvQYOsQKLOIuV5G1ewvz5eWc5jPGAZ3PBiB7ShUb9seDK5AMQxOg90H%2BQaG19qPz4mw0lURQ\"}]}\r\ncf-ray: a33ba35fd8265693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10618\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ipwho.is/","fqdn":"ipwho.is","domain":"ipwho.is","tld":"is"},"ip":{"addr":"172.66.175.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:05.362Z","timestamp":1788175145362,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipwho.is","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 04 Aug 2026 17:11:12 GMT","end":"Mon, 02 Nov 2026 18:11:07 GMT"},"fingerprint":{"sha1":"5E:E2:C3:89:78:64:9F:D1:72:38:82:CE:9A:64:52:5E:6F:BC:2E:8D","sha256":"84:35:87:FA:FA:70:1B:FD:E9:C4:CE:E2:2B:E4:BB:4E:2A:1E:20:D4:9B:99:4B:F6:FC:3E:CE:8B:56:FD:9F:30"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ipwho.is\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://earthmetaai.info/\r\nOrigin: https://earthmetaai.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 31 Aug 2026 11:19:05 GMT\r\ncontent-type: application/json; charset=utf-8\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\ncf-cache-status: BYPASS\r\ncontent-encoding: br\r\ncf-ray: a33ba3629b87783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":638,"size_decoded":718,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"9b4377b9e6c0d9740cdc35026f2cc0b7","sha1":"b20c30ff2e74b92c429dda872a0f1b5c03a52e54","sha256":"9792c57511ae767e24192193a3cfa3cf088d3e478d44016bf688bc044ac4dedf","sha512":"95e9694954fe1fb5412932cf8f93e67027828c60e40d152e94abdf6d2b475f4d9fd5daee99ce904e2c668cd86a78635f74d59819b9f3a7848f775a900606bd91","ssdeep":"","tlshash":"cff02d21019c7e0e86af438a20cef90a26bc2017d2c2a18ac8fc5a94c1c42ee708016f","first_seen":"2026-08-02T22:12:00.58064Z","last_seen":"2026-08-31T11:35:23.976377Z","times_seen":578,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":3,"connect":11,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/0x-8gb-~pl-lm.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:06.206Z","timestamp":1788175146206,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/0x-8gb-~pl-lm.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:06 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:42 GMT\r\netag: \"6a8bcb0e-d12f\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 996\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZE90i8yG06pbexEvE6%2BAvImlykkmVPUHXrF%2BYs1TXKQZCEU%2FLZZZNPDSVou3LYmP76aOjns9fS2dtW0Tw78%2FlhSfdjzDYpmCmrY%2F2MIkyT9QZbYwHXr6QHr1IT997vwDbHfQ\"}]}\r\ncf-ray: a33ba367c8e95693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 53551\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/turbopack-11ygihee~8l.j.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:06.227Z","timestamp":1788175146227,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/turbopack-11ygihee~8l.j.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:06 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:42 GMT\r\netag: \"6a8bcb0e-299c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 996\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tAaavW%2FeLbTBznjMV7AXQqCCb%2FtRybGvHg0yiROCAAzKU3kJdWyloFwqrPdizxkyQagbG2mRjqEiIz0EoGs5oNBUYzQKpLNPBqp0eFbaIiTc0CxKMJzgUWfe%2FLUZtrdOab3Q\"}]}\r\ncf-ray: a33ba367e8ea5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10652\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/0q6ke7mp41.dd.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:06.245Z","timestamp":1788175146245,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/0q6ke7mp41.dd.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:06 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:42 GMT\r\netag: \"6a8bcb0e-1038d\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 996\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RP%2B5oUTLntj9AQ5KlVXnDGf4A8iNUTwuwZD%2B4gOpM3%2Bojq7eClhyv1JELAJou5dO8%2FOxxAlFrrpMgrYCjxjVi56UBNNWmFQlK5ggPskdJktr50X0HWWguBYqGjIS62hp6UDV\"}]}\r\ncf-ray: a33ba36808ec5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 66445\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/geistmono/v6/or3nQ6H-1_WfwkMZI_qYFrcdmhHijks9bA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:06.511Z","timestamp":1788175146511,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/geistmono/v6/or3nQ6H-1_WfwkMZI_qYFrcdmhHijks9bA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://earthmetaai.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23156\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 26 Aug 2026 11:01:39 GMT\r\nexpires: Thu, 26 Aug 2027 11:01:39 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 08 Jun 2026 16:32:04 GMT\r\ncontent-type: font/woff2\r\nage: 433047\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23156,"size_decoded":23969,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23156, version 1.0","md5":"101f830f66bde67d6f815e42ed6c6f10","sha1":"9b4584e63a1554a356f3c6ad4dc7b98a034313b4","sha256":"c9b2702d0ff5865fcf7ed9442ec95888830b0065682ca4f2b44e2fa3b3a4f269","sha512":"94ba8955bef6c9ba90cd9a1ac2ebe06e6574ba2a567f0d246b79e9872d538d12bb20d3c56e67a7e5a2f36d82306ab0ca09ce315cbd171c66d471af434206edc5","ssdeep":"384:Nmb/KM+jEhKHk2xFO40A1ncGNcx18I+3Qiuo187cwcr5RIqUtshyqAeWeM6r2uOR:NaKLjEg9JbczZwQho18Awcr5RIxtsIeK","tlshash":"2ea2e129cb41eb14610048e86b820c4b3fb47d1b30835aee6452bdbaa4f2cbd175e5fd","first_seen":"2026-06-09T00:53:20.653285Z","last_seen":"2026-08-31T11:20:11.736436Z","times_seen":895,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":21,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/turbopack-189etcromc_6w.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:04.928Z","timestamp":1788175144928,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/turbopack-189etcromc_6w.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:04 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:40 GMT\r\netag: \"6a8bcb0c-299c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 995\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a%2BdXhoa1xOt6iCxkimkIu3TKxyO0ZHXF7XiNMGN68Ao4xRcU53NbGDOTvoYW7V2cN%2FptcbeLR5v05%2BpaFBd4wyO5MHdiI9LEGPgVncJhF03dFV12e582CalJ%2BAh1NhisprA%2B\"}]}\r\ncf-ray: a33ba35fd8215693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10652\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/0oiuc13w0d32z.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:04.952Z","timestamp":1788175144952,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/0oiuc13w0d32z.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:04 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:42 GMT\r\netag: \"6a8bcb0e-158fc\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 995\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hpiWK0qGzrtqvYqmaS45%2B2tLVWgHKgxiA5bo5QtGiTTr3UdYbVwb1qvt48uM7NG2qV1ji9ANmBM%2FOFRKG%2Fvw4kBRzwL%2FumX8Ku%2FMMSwf%2BAC7aAgyg5fG87wz9NrYMo%2BoH%2F9v\"}]}\r\ncf-ray: a33ba35ff8385693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 88316\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/telegram-1781002140181.svg","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:05.321Z","timestamp":1788175145321,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/telegram-1781002140181.svg HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:05 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FLBpA7nKHkpeLc7%2BJ%2BlDRj7aC4kuhx1X5%2BQIJm1LmJwZPrBtNW7ImVHaZsevrorx%2FQzSyuyPnynR1PMu5TEFcTMUdIKs4h4P7G4pZko%2BHGJNhmPULhkAnM56TA11djK7UPK5\"}]}\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\npriority: u=5,i\r\nage: 995\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a8bcb10-333a\"\r\ncf-ray: a33ba36248825693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13114,"size_decoded":6321,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ef473fe3a0555823ec4decd6e63fb6f5","sha1":"b2096e8d0ac6842dac6d226bfb87aced65b724f3","sha256":"d2f1fc25616ba02933506b21fa668289169e58ac4c76b5f7f209f2632f289f2e","sha512":"47d8ca57ec482155b93d6d97e4a73d7afa383f6795b674c20415771a544d3e78bc539d7c4582a054fad3914256c0e9ccf5d8926418411d8869aa4508ee9c9e89","ssdeep":"384:fA9Y7MObKXVDjzMwondA7Aaw5kNVnsILCR6UnyFaFHd:I9LaWVLMHDaw5SsIuR6UnyFOd","tlshash":"9442e8c72368d3ecf7db43d62c16296537b578e9f11122d093e326479e8adf60508c6a","first_seen":"2025-08-29T04:25:00.439874Z","last_seen":"2026-08-31T11:20:11.741842Z","times_seen":9,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/turbopack-15tm-gvx.y2_j.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:05.921Z","timestamp":1788175145921,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/turbopack-15tm-gvx.y2_j.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:05 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:40 GMT\r\netag: \"6a8bcb0c-297b\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 996\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bldDxe7QA2SjlZyxbeiImIbvLbIx1o1fWMJBh5u8GLUKB%2B01wa9RO469NhVTcQlK0fBG59Qsqxkd0TU%2BpTUrOdCdEz3qr4nnyoRqseWy9%2BKqx3LfjUGU4rZs8tTMHLMXCcI8\"}]}\r\ncf-ray: a33ba36608c45693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10619\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/turbopack-024zy_i8fsm9g.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:06.110Z","timestamp":1788175146110,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/turbopack-024zy_i8fsm9g.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:06 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:40 GMT\r\netag: \"6a8bcb0c-297b\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 996\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0RZx7unDYpijgo4P3sCwdSM8DyjWhZvG%2F%2BAWvWihS2SkweEeb%2B5d%2Fs%2FjVBqtgs7dciX2ZRZ8A%2FWTgDDxU3l%2FHjh%2B29Qf0oIvCelhrxQ6FkIapd5BmEQqqoBCqWaGaux%2F%2F6Pu\"}]}\r\ncf-ray: a33ba36738d85693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10619\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/m=root,base","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://earthmetaai.info/earth_files/J-iGqMEwFjY.html","date":"2026-08-31T11:19:06.656Z","timestamp":1788175146656,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/m=root,base HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/earth_files/J-iGqMEwFjY.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:06 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:40:08 GMT\r\netag: \"6a8bcb28-44d5e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\nage: 990\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xZuJsuBAywJhPmJVCD0iP5VgG%2BkAxQQqWKr3KIuU4PKgLMjKdZZy6OCx9EAT6ti5MI30ccOX0aQboMuGW75toUWg46k%2BaFsvIdcj%2FJY4s6kz1Ab7LGyjU%2FMKC0epzmX5q8lU\"}]}\r\ncf-ray: a33ba36a991c5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 281950\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/vendor-modern.813f166e.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/earth_files/saved_resource.html","date":"2026-08-31T11:19:07.441Z","timestamp":1788175147441,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/vendor-modern.813f166e.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/earth_files/saved_resource.html\r\nCookie: _ga_P6QBGXDK3N=GS2.1.s1788175146$o1$g0$t1788175146$j60$l0$h0; _ga=GA1.1.1510774643.1788175147\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:07 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:40:12 GMT\r\netag: \"6a8bcb2c-56fbf\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 991\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s5T8yRyorf7QOOfr%2BLzSL2wyQK0IN3UghY7n83SbW81A5l0jkc4%2FpI6K59Md6GOewMDvvlsHy%2BdDMUc2%2Bn1DXJYYx5ob1iSENT7HG2tFiL6qo8AfCe%2B8C7DcnSm6H4%2B82edu\"}]}\r\ncf-ray: a33ba36f89725693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 356287\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/secureproxy?e=jscdn/getFile","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:05.669Z","timestamp":1788175145669,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"POST /secureproxy?e=jscdn/getFile HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://earthmetaai.info/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://earthmetaai.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"wti093jmp3m02wsu3p7w\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:06 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, origin, access-control-request-method, access-control-request-headers\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wCN375DjrpTGDcOQuTMDh27oFUPLbfa7KtMWI%2BzRoNhqhLAkVUcwEABnq5ElM3l2JSJBZw%2FZ5%2FlX7o%2F5kFiwuS2nX9c%2BpH3fM4kTnJMlCAZZfEqhAa7zgnpnsOmIS3a%2FsSoajzo%3D\"}]}\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\npriority: u=4,i=?0\r\ncf-ray: a33ba36478ab5693-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3420298,"size_decoded":2631656,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"62cf49b6c48765a342b26d6cb1537869","sha1":"5298cb1b8ffc3b6304a1e8490bfff01858bfbd94","sha256":"ff86f99d6164bbd7e6fd4a2253c61cbca4fc85181256065365b716c81c746896","sha512":"dc28e0cc2916edaffc0d23ed483f2dd6c118bca693f5ac20afa8cb8c8e045111874ea446c7a35782bf38e647fe8505c40e52b0354e588c179ef30e4f9dcf948b","ssdeep":"24576:8SRSV8/8Yae0PgGswPpBroS7InwbjtsJshJuEbdx/Wes:O7OwPEZJse","tlshash":"6a2523053e97ea618f8c77a6b8f66d06b4401f0389cc54dfe866e8c02169b7581deb1f","first_seen":"2026-08-31T11:20:11.74271Z","last_seen":"2026-08-31T11:35:23.996179Z","times_seen":2,"resource_available":false,"data":null}},"time_used":906,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":436,"receive":470,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/0yyd6j98n09so.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:05.899Z","timestamp":1788175145899,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/0yyd6j98n09so.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:05 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:40 GMT\r\netag: \"6a8bcb0c-c916\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 996\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RzDZ9laNmcZUowMTKxtdZaRSnnJ1%2Be9Bw5o7dilbQoQGsWoo6ccr7wzc61KHV5id%2B3fu3dDU0seUDCu7D3mBwOewWwCslRrHOQjp%2BB%2FIvVWJjlu542BY5X0lqYDWUHMZgXq5\"}]}\r\ncf-ray: a33ba365e8c25693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 51478\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/15y~yussy8u39.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:05.225Z","timestamp":1788175145225,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/15y~yussy8u39.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:05 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:44 GMT\r\netag: \"6a8bcb10-138\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 995\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kq0GwP7grkHIhqXv48spVZ%2FcTyoEqGIZ3YCebDeVMfPtz66QQhvU6QaMpm4XlhCoifLSnxv2AvmUzY6qlJR3FpShZ3HO0vKjdIv4GjhBp7DUWSeiiSlUvmXyuOwxf81mtuKR\"}]}\r\ncf-ray: a33ba361a8635693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 312\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/05u9wykhv1omo.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:06.002Z","timestamp":1788175146002,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/05u9wykhv1omo.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:06 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:40 GMT\r\netag: \"6a8bcb0c-165fc\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 996\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GRq8H1s1RYhVDIPomi01zvSITJO%2BbcznI1cIlvtFUzkfq8o7q9QOg1lFnp5EiDfWntWTl0mX75uvL60SCvqIpXD65ePbOmP74A5jbCSprm61sMInf18l3FcCMoWYG3otD4g8\"}]}\r\ncf-ray: a33ba36688cd5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 91644\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/www-player.css","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://earthmetaai.info/earth_files/J-iGqMEwFjY.html","date":"2026-08-31T11:19:06.655Z","timestamp":1788175146655,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/www-player.css HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/earth_files/J-iGqMEwFjY.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:06 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:40:08 GMT\r\netag: W/\"6a8bcb28-81ffd\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 991\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FKcBIHRRCflalhOj2uKYUZl3wNyMhwp%2F9aeT%2FopkzSYb%2FsZBtZFflFcO3uBwetcZF9V7TU9Mw8rzDM7uYc14Ql9CADjR3664Dch53Ci1Ud0%2F5k1zFfpcCjba9we54wIaL66p\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncf-ray: a33ba36a991a5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":532477,"size_decoded":97740,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"2af0062dcf6ec29942d12cd7452b7cff","sha1":"38c96498a1ae291333a58c250022f2333fb08885","sha256":"1f457b3c2593dd64a542c19edb3abbb59a8f2cae6efd299ef381b740631e275a","sha512":"7d41cddd998c49ac282d4093bc5ace5c28f5a565b1dadf1555e1771655eaf3a75e6e4c73ba3d6d7eb2ce38b480988a59813e2d1d48b135884ebe038188ed4fb1","ssdeep":"6144:X8d5Fe/qoMOg7UCBLUIoImM5KJpR8Oi4u7:QYxMOg7UCeIoIr5KJpRTg","tlshash":"a1b4d972f0a1233cb2278d9997d9d54d7339d983e2e12aeff11166dacbc77811326206","first_seen":"2026-08-19T01:35:43.72137Z","last_seen":"2026-08-31T11:20:11.743993Z","times_seen":666,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/channels4_profile.jpg","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://earthmetaai.info/earth_files/J-iGqMEwFjY.html","date":"2026-08-31T11:19:06.665Z","timestamp":1788175146665,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/channels4_profile.jpg HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/earth_files/J-iGqMEwFjY.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:06 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:40:10 GMT\r\netag: \"6a8bcb2a-f2c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 990\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2sgo1z%2FeSJ6DnUPK2Wa30J7WxHxw9yQSb%2F%2BBuq6zl8hmHbelg8OTmhOOHgi4yFqOF5e1XH%2Fx4eZyb6FcssgsyAvH%2BGbI%2F%2BKe4d%2BtEfBJTztPEOj1s3vKRbj3ijf3A2v%2BY3zN\"}]}\r\ncf-ray: a33ba36aa9205693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3884\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3884,"size_decoded":4827,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 68x68, components 3","md5":"7b8305d5ce645fb7b9bc42dfb0159bb5","sha1":"20920512b84c6e4fb6833dc1aa9d7befd1e236a9","sha256":"7fe1586a79b11ff4f8cfcaf277abc5e348442fa740f0b5a7664f7559c4b063f1","sha512":"6c0228712aceba5ba831200d5057a9ba07ae366ece5d2bf7a2b9563c88a1d70d29b35f2651ee1c691c2d7bd40709cd76f2d4ecebcbf635f846e9e581d9d016db","ssdeep":"","tlshash":"63817dff03523e1aeafe067bc9e9492808c111688a0898cfd39d76a97d52fc55db5504","first_seen":"2026-08-31T11:20:11.744621Z","last_seen":"2026-08-31T11:20:11.744621Z","times_seen":1,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/saved_resource.html","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:06.940Z","timestamp":1788175146940,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/saved_resource.html HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nCookie: _ga_P6QBGXDK3N=GS2.1.s1788175146$o1$g0$t1788175146$j60$l0$h0; _ga=GA1.1.1510774643.1788175147\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:06 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:40:14 GMT\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npriority: u=4,i=?0\r\nage: 991\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kS32E9gGXMl9MJD5CNA0%2F6%2FLWpAf2n5TTUzDJGIZ9gIjrIvLlilPw0p0XrqbZyvpnQ%2FPVeXrSLCCH6mVysMyc%2BKwmeHVPFJC6ja%2Bc%2FzHYIr6tRO7BYwNW61JMqCi8yx76Uxv\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33ba36c69485693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6164,"size_decoded":2660,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (5950)","md5":"4905852228b26ac575a5a487a42a6d69","sha1":"5c8365afe14a3d079310ab6e8288041223fbe0bf","sha256":"7308393b8e26cd1fe18c18fe398095b8f8633260aaf300352da137c56b48ea72","sha512":"5e3ad23e40fdee6543a7f54d162c3a3fd10e7c9cc56e4f8efeafe0fc70ba709bdcd097fd2b0d096f2635ff305905f413903e44422fffde2826a3c150016e14c0","ssdeep":"96:hP1hEcIuO8XwdH9FSFQLy3IdyOR6dHUFxEBVxSIzXmXNL0f9wmlwwwjxDga5ZwxM:7ucZSxxVxxFT","tlshash":"afd10038f50d840eb19ba52469f4d5c9e3e4c553973f1aebe46f72a5c1ca4ca08bdac0","first_seen":"2026-08-31T11:20:11.760301Z","last_seen":"2026-08-31T11:20:11.760301Z","times_seen":1,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.telegram.org/bot8896894786:AAFecM1VWnMa-pajYz-PviS6guvU1YzlEEU/sendMessage","fqdn":"api.telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.166.110","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:05.446Z","timestamp":1788175145446,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Tue, 11 Nov 2025 15:14:09 GMT","end":"Sun, 13 Dec 2026 15:14:09 GMT"},"fingerprint":{"sha1":"EC:27:13:72:1E:6C:94:9F:47:59:A4:24:4F:AB:9B:02:E3:6E:54:41","sha256":"64:47:03:9A:C9:ED:B9:03:8C:07:6E:AA:3D:BF:75:4B:4C:C1:4E:C1:A5:8C:83:2D:3E:FD:0C:E7:F7:82:C2:71"}}},"request":{"raw":"POST /bot8896894786:AAFecM1VWnMa-pajYz-PviS6guvU1YzlEEU/sendMessage HTTP/1.1\r\nHost: api.telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://earthmetaai.info/\r\nContent-Type: application/json\r\nContent-Length: 187\r\nOrigin: https://earthmetaai.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":187,"data":"{\"chat_id\":\"-1003706392935\",\"text\":\"🔔 New Website Visitor\\n\\n🔗 Full URL: https://earthmetaai.info/\\n🌍 Country: Norway\\n🌐 IP: 195.64.118.152\\n📱 Device: Windows PC, Firefox\"}"}},"response":{"raw":"HTTP/2 400 \r\nserver: nginx/1.30.1\r\ndate: Mon, 31 Aug 2026 11:19:05 GMT\r\ncontent-type: application/json\r\ncontent-length: 56\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Length,Content-Type,Date,Server,Connection\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":56,"size_decoded":390,"mime_type":"application/json","magic":"JSON text data","md5":"d948d5845276032d39194409db9ad97b","sha1":"475fe4e71224df85d494e34e0cb8ed799afcdb0d","sha256":"a0a1e0f24b392c6da875c10977d169497a47f669b7e671e62330e125a56721fb","sha512":"3e538a78d85dc32eb47db705c97d627ed8851f6dd87904e2e39aa1d5357cdeaea2a7746fc2ccddbde9bcbcab66ddcceff4ab5cf8db169c49e0f81c592104c67f","ssdeep":"","tlshash":"22900244098ed56744da11605935954855b756b8641964404d95611d56421ea58f240a","first_seen":"2023-07-28T20:34:41Z","last_seen":"2026-08-31T11:20:11.762052Z","times_seen":493,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/0cf_vsv5x7to8.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:06.306Z","timestamp":1788175146306,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/0cf_vsv5x7to8.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:06 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:42 GMT\r\netag: \"6a8bcb0e-8f92\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 996\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cbKfyv7bfaZLME%2Bas69BFXqW6tUAVtunHy%2BWuI%2F5L%2FgiE8sVWxYe%2Bx27z7GswG52zfD%2BxIy8M2YnquCi0hI0hL3OYN9hwofmwhQOXjKBWOD3xAP9MDD6oAjG%2BZVxiVQLOWw2\"}]}\r\ncf-ray: a33ba36868f45693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 36754\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://socket.streamable.com/","fqdn":"socket.streamable.com","domain":"streamable.com","tld":"com"},"ip":{"addr":"13.216.84.185","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://earthmetaai.info/earth_files/95qk5d.html","date":"2026-08-31T11:19:06.763Z","timestamp":1788175146763,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.streamable.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 10 Oct 2025 00:00:00 GMT","end":"Sat, 07 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"40:58:37:68:0A:97:87:2E:1E:0D:E0:D6:AD:2C:69:DB:BD:64:15:EA","sha256":"2C:65:3A:93:AB:CE:16:E9:07:65:FB:71:5F:89:62:A2:90:82:AF:5F:9F:85:F0:B0:D5:0B:2B:7B:4A:3F:0D:C7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: socket.streamable.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://earthmetaai.info\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: oP+HaOY/ImQ+CZPZvfOfkQ==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Mon, 31 Aug 2026 11:19:07 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: H4gkRNFouMae/FgRMK7Eflsmqdc=\r\nSec-WebSocket-Version: 13\r\nWebSocket-Server: uWebSockets\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}],"data":{"size":0,"size_decoded":224,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":1223,"timings":{"blocked":-1,"dns":418,"connect":511,"send":0,"wait":98,"receive":0,"ssl":196},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/14j.y0bube06d.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:04.934Z","timestamp":1788175144934,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/14j.y0bube06d.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:04 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:40 GMT\r\netag: \"6a8bcb0c-7d56\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 995\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sqrsLxTjokykbYarh5QMVN9y24toAbgCfaweNfwiUbDQv2b4FSEm3RGVIn1SZz2SUiJ2IFlKzvxkDXjQkK7lui0pjMtHJn6HA0JnpeMvpgvY4p%2BTNOYb8Bcrg0A%2FvYoRYRHy\"}]}\r\ncf-ray: a33ba35fd8255693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 32086\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/0eadlloehmj6i.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:06.039Z","timestamp":1788175146039,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/0eadlloehmj6i.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:06 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:40 GMT\r\netag: \"6a8bcb0c-d7d9\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 996\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J2ef1Or3vmacgWe9uyGYUw3yuqfzZJ%2BPErdHs1rP1Z42qrkHLbbCoKxnc3bS44mRly%2B2aU8aVOalIw%2FQ%2B%2BNjF%2BktlXyvbnM1v86w%2BP0BSYYW8N2CUzhNF%2F43iO807JE7js2x\"}]}\r\ncf-ray: a33ba366b8d15693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 55257\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/0.v34_pf4fh1c.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:04.913Z","timestamp":1788175144913,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/0.v34_pf4fh1c.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:04 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:40 GMT\r\netag: \"6a8bcb0c-be69\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 995\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IUfxNVcyK%2FBkU%2FSSl9w%2F1WhurwF8T5UoZaRWrpIiklpgbXgbDaqRzuHz3qgHKxvn6kX7jlEIdLsa09bz%2F2Oav4NeGuE1S6ACbK4wCkzY2Gx3RUkyQpZODYQ7lJqbpMKI3RAF\"}]}\r\ncf-ray: a33ba35fb8155693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 48745\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/0h4nb5j5snhvf.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:05.220Z","timestamp":1788175145220,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/0h4nb5j5snhvf.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:05 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:44 GMT\r\netag: \"6a8bcb10-13a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 995\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BOjKQ%2BPSNJw1y8NUv6zNgFcWpVepzw03Q5qKMEL7dC1mhC9oBQPTuRYGHyLq9NxIWcmO7hRfAtrIRGNrBEVc39BZqRyS4cS36MJLw7jxNqDZxoyukdmiuuTYKlChQt0WS4f3\"}]}\r\ncf-ray: a33ba361a85d5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 314\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/turbopack-0bferx3h1q2k9.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:05.961Z","timestamp":1788175145961,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/turbopack-0bferx3h1q2k9.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:05 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:40 GMT\r\netag: \"6a8bcb0c-297a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 996\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QDdx8PXB9sk6o%2BV2%2BMwiI8pAx1%2F%2FJEFX4HelFB0RJsphZKql9umA9sD9SCpT8cH2aSZqO9VE%2BDcNxoJHDjYBTL40JhCM7suRFqFRDMRJZdKGhwsRLn3w8JhqVN9F7Silefyn\"}]}\r\ncf-ray: a33ba36648ca5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10618\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/_ssgManifest.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:04.895Z","timestamp":1788175144895,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/_ssgManifest.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:04 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:40 GMT\r\netag: \"6a8bcb0c-a1\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 995\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=41U1UmUl9Zn%2FhHzf1jVHUe06R2Wf63BkmhzUIuHsPuD01vu%2BDgfRuiGe1w%2BKeT4smVyXCw8NKaiISQDBh1Y1vTpTlntfXraN21kcUX%2FS5a093Ng4VE6wePLAEsam054qqJlw\"}]}\r\ncf-ray: a33ba35f98085693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 161\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/svelte.js","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:04.871Z","timestamp":1788175144871,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/svelte.js HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:04 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:38 GMT\r\netag: W/\"6a8bcb0a-22c7c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 995\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gV7NwGUz2VRERMbUVNgh2WJxF6yp5mXJbnf8lFsKCNxSlYfsB%2BFmP0Tjl82oCanemqOIXhyREk%2FdxRPYELyFmOLX30n9wkLfhHAkGDAuIq9KDINUGfIsyXN69rx%2FrBe2volE\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncf-ray: a33ba35f7ff95693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":142460,"size_decoded":40079,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"4d9b2f6b39ea5318eb921c51cdc3ac49","sha1":"faf009f771e46ab2d708a646d11073e27b4e4e08","sha256":"3f6fc78b7a4d3e4e1ce180e92f07ba3ef864800ab037469575f924cd84006983","sha512":"641be645ee2a943f2b3b987d6ed98b2ce3f72174e55c6aa2551034378a50a497b0c5d2d76b7fc604881a23781d9d9b54942fdaf8ac2cd6ba590812dce84a9e85","ssdeep":"1536:E0hivHw7dV3Bdry0HoT7NlNdvvH4KYK+us7OIGuT4/bioFF:E0gHw7vzu0IT7NHdXzy7O92oFF","tlshash":"9cd363c6595bd4d58e1512cec07bec08e4285967ceacf193ba2cddc1b82df22948763b","first_seen":"2026-08-31T07:39:45.852134Z","last_seen":"2026-08-31T11:35:24.004172Z","times_seen":6,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/null?e=jscdn/getFile","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:05.445Z","timestamp":1788175145445,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"POST /null?e=jscdn/getFile HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://earthmetaai.info/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://earthmetaai.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"wti093jmp3m02wsu3p7w\"}"}},"response":{"raw":"HTTP/3 405 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:05 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eSe4wgsyeUTmReKCIUK4TfhuAtkfwwxoHyBA5K0S%2BgFXzCAPhLw8U71bXn0Z04WQDqlIgWtR%2BQvFtPabQ6nSGCmXpPvA920TPMIcCM%2BN9QLKZw58JvlcVWTZIKguponLDAFy\"}]}\r\ncast-mode: default\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a33ba36308885693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"405","status_text":"Method Not Allowed","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":166,"size_decoded":929,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"cc1936e6c20f6a866226130b869d9953","sha1":"65d15aaa085d0c6292e27fecd97ce7c90deb4ee6","sha256":"11f4864b57acc22316998d012efc32274ea8c3f3230acab7bc8ee576c594b203","sha512":"29d5ff85814c6470cd6665b01d1f2b4b9f2303605c922f6f685375875ad1aeb23d80d386497164fc8cdc713968557cbe55b55b8c571ae27dff53c55790f382d6","ssdeep":"","tlshash":"7dc08c6e271b3c48c6a321751ac3f4b0c29da2a284f847006844005331c32169acbb51","first_seen":"2023-04-11T14:00:01Z","last_seen":"2026-08-31T11:35:23.991526Z","times_seen":940,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/14j.y0bube06d.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:05.980Z","timestamp":1788175145980,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/14j.y0bube06d.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:05 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:40 GMT\r\netag: \"6a8bcb0c-7d56\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 996\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eI%2Bm7%2BR7C0DfKL5GCTDQG6ULSMClyUjNgzEoSDbrE0ZpRoP4gBpO4eMJ%2Ba1xl08fHIVEeII3eMe7v%2BLRShRiplG%2F9CsSzQKJJ%2BOBTC9VOnZ5YX6Y4zTtzF%2F0Mj6jae1%2B6bZy\"}]}\r\ncf-ray: a33ba36668cc5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 32086\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/base.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/earth_files/J-iGqMEwFjY.html","date":"2026-08-31T11:19:06.810Z","timestamp":1788175146810,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/base.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/earth_files/J-iGqMEwFjY.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:06 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:40:10 GMT\r\netag: \"6a8bcb2a-18909e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 991\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IyGEF2yWKCIJXHWRfL%2FTpvdHYEM7RLeySc%2ByGWzTCVUx34vpljaRTL8IEBAgFLuepIcpfyDJgAiFpt%2FYOUgtXC%2BKeJfRT00xpVwPwdXxca1Nxh278cp%2FQi1STkf%2FBRe20FAb\"}]}\r\ncf-ray: a33ba36b99385693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1609886\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.ytimg.com/vi/J-iGqMEwFjY/maxresdefault.jpg?sqp=-oaymwEmCIAKENAF8quKqQMa8AEB-AH-CYAC0AWKAgwIABABGE8gZShkMA8=\u0026rs=AOn4CLDI8t-tgmk8bph8JHYGY199rb5a6g","fqdn":"i.ytimg.com","domain":"ytimg.com","tld":"com"},"ip":{"addr":"142.250.178.118","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://earthmetaai.info/earth_files/J-iGqMEwFjY.html","date":"2026-08-31T11:19:06.948Z","timestamp":1788175146948,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgestatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:34 GMT","end":"Mon, 02 Nov 2026 08:37:33 GMT"},"fingerprint":{"sha1":"8E:D8:92:6C:01:A3:D8:52:72:40:66:4B:CA:3A:5D:1E:B6:1A:F1:F1","sha256":"B8:C7:1D:B9:82:FE:BC:6C:1F:20:2F:DA:4A:2C:3A:C5:73:6B:04:C9:CF:22:E5:F5:66:E5:3E:0B:59:A2:62:7B"}}},"request":{"raw":"GET /vi/J-iGqMEwFjY/maxresdefault.jpg?sqp=-oaymwEmCIAKENAF8quKqQMa8AEB-AH-CYAC0AWKAgwIABABGE8gZShkMA8=\u0026rs=AOn4CLDI8t-tgmk8bph8JHYGY199rb5a6g HTTP/1.1\r\nHost: i.ytimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 114157\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 31 Aug 2026 11:02:36 GMT\r\nexpires: Mon, 31 Aug 2026 13:02:36 GMT\r\ncache-control: public, max-age=7200\r\netag: \"0\"\r\ncontent-type: image/jpeg\r\nage: 991\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":114157,"size_decoded":114821,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x720, components 3","md5":"74b72db95e3849bcfeeddbac87e240a4","sha1":"dedec4c947a603f79c051eb9fd1805baea916adf","sha256":"f381517b4d2af9daa5fd564c72e684752fb89d891081a2917f6fab9bf0631556","sha512":"169497bbac893fa8d42174a0203f6c64f99aef97a261a70dde5ef52cad2766eaf79ae92d29c13bcfed2ef93b11c2c310785d7e7498a76a67e1d9e93524b6b41b","ssdeep":"3072:Q/+4xjCMI2o8tzrSxzcOETvDkfPNTH/jg:h5MhprSBcOE7gfPhg","tlshash":"9fb3122b06b0a37651109da2fd630845cb8e669b724d464f3bfc3d3ec1badd2bc96251","first_seen":"2026-08-31T11:20:11.765455Z","last_seen":"2026-08-31T11:20:11.765455Z","times_seen":1,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":0,"dns":0,"connect":15,"send":0,"wait":16,"receive":36,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/0q6ke7mp41.dd.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:04.951Z","timestamp":1788175144951,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/0q6ke7mp41.dd.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:04 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:42 GMT\r\netag: \"6a8bcb0e-1038d\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 995\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kayURAEWUuUZiloVbOwq%2FHwnILMmfBNoSxnTxK4ZsOWFYiSpzk%2BgMONjbrDsoaf090uAjfQ5s2iH0GgmGIhMhWTB3GsphpW8Elui2hqJkgp9m126egxaXouLIhoJKNKyD78p\"}]}\r\ncf-ray: a33ba35ff8375693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 66445\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/0npvweeimmga9.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:05.221Z","timestamp":1788175145221,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/0npvweeimmga9.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:05 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:44 GMT\r\netag: \"6a8bcb10-110\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 995\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dK3LQWXmT415izzWGIUc%2B%2FDD2FWTHRKFLM8MGeTCZ77UaQg2TLRREu9zD7fPOZSWq6fQRIgI%2BPqgjfA6%2BERA5FiwFECuUtoVOfsDeQtOX35cZtchjitGZfn%2Fi4LIc6VpFsrp\"}]}\r\ncf-ray: a33ba361a85f5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 272\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmeta.ai/_next/image?url=%2Fearthmeta-wordmark.png\u0026w=384\u0026q=75","fqdn":"earthmeta.ai","domain":"earthmeta.ai","tld":"ai"},"ip":{"addr":"5.196.76.51","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:05.357Z","timestamp":1788175145357,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmeta.ai","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 21:20:24 GMT","end":"Thu, 29 Oct 2026 21:20:23 GMT"},"fingerprint":{"sha1":"4A:C1:8E:B3:7D:3E:17:D5:5A:A6:E8:9E:48:63:14:AA:E3:6B:F9:4D","sha256":"81:8B:95:6F:A6:E8:A4:6D:E2:9B:C6:68:43:9C:71:20:20:2B:42:3E:61:04:E8:8C:2E:88:EE:4D:14:24:58:F1"}}},"request":{"raw":"GET /_next/image?url=%2Fearthmeta-wordmark.png\u0026w=384\u0026q=75 HTTP/1.1\r\nHost: earthmeta.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 11:19:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1118\r\nvary: Accept\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: -e_GLejVjFv4v0ey_dS9pA2X2w8WxVs8rrYTqJEia4I\r\ncontent-disposition: attachment; filename=\"earthmeta-wordmark.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: STALE\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=(), payment=()\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1118,"size_decoded":1787,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f0459d2d2f1fbde81813db2c5ee12982","sha1":"7761e8f5098f2c60071d50eac971bb560801bc75","sha256":"f9efc62de8d58c5bf8bf47b2fdd4bda40d97db0f16c55b3caeb613a891226b82","sha512":"d3e00fa45c132e07b740944bf969781b0c6ed8a5c0ecd2ef3e0a75417a0643d439557b04988531d6049923db0211c89eed83d395ad783270ad74fb12a4db200d","ssdeep":"","tlshash":"6d21f9fc409f83e4d3c7e8b2ccf4aa04c5096c21a9266366cc96bfa0083909097ed25c","first_seen":"2026-08-31T11:03:21.821458Z","last_seen":"2026-08-31T11:20:11.767573Z","times_seen":2,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":4,"connect":27,"send":0,"wait":28,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/turbopack-0k_aa2xgfmxh_.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:06.373Z","timestamp":1788175146373,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/turbopack-0k_aa2xgfmxh_.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:06 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:42 GMT\r\netag: \"6a8bcb0e-299c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 996\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FYvnZpfeXoURujd3sdTp%2B3ygTy3SkwpJ98%2BmRatCKr2WZAt1AZ2aWCeb%2B%2BeAFwX4bC0hlAoLZyhyiNgSn%2FO7QyTnplgbPfAN3AXu0ckd8X3RUp2YGMbf7XfAfW29XdnJ7lWP\"}]}\r\ncf-ray: a33ba368d8f95693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10652\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/assets/fonts/pnova/ProximaNova-Italic.woff","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:06.513Z","timestamp":1788175146513,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /assets/fonts/pnova/ProximaNova-Italic.woff HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/earth_files/0dc69x6pqgnih.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:06 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:40:14 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Uhdg%2F85g3qe9ffwXIyb6L2rjdwKk7zifAcRt5rv12JFzeKQYf3bfZyl64MPtW82s9lNHm9V8B0OozOcVuZg25ZsEJLs%2FTgy7SIusFhbKMcXDy0qJAmkH2cFUeYAb9z68S5lM\"}]}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\npriority: u=3,i=?0\r\nage: 994\r\nvary: accept-encoding\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33ba369b9045693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":162205,"size_decoded":163093,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (23310)","md5":"bb4228b8762b5c5bd421966fff541995","sha1":"65e0eb176204ecd0b4ec5287e037d4a46f2a12ac","sha256":"852450195ebbef3f796f63c26b85361fd04ca7d8f2e7730640020caff3dae82d","sha512":"686dfaf3f4fddda1a0465ca699f38e162ab542b2b30abc05eb3e832419ae34452ebab286981f7dfa462077d6caf9fb164985ea47373c980595e8928302081d69","ssdeep":"1536:QjuBV0d+y4k0ovf4eGEY0vf4eGEY7Ev3dwsB/kentRIkf0EASgZyAIT/eUQP4xLr:QUK0/wSsB/Dt+XF715FFcLk9aXDFA3d4","tlshash":"49f309b091e2097bb16782d955e1e71d66add20bf4174918f3bc12f62f4aeed883318c","first_seen":"2026-08-31T11:03:21.848022Z","last_seen":"2026-08-31T11:20:11.732732Z","times_seen":2,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-08-31","alert":"Detects file containing Telegram Bot API","trigger":"earthmetaai.info/assets/fonts/pnova/ProximaNova-Italic.woff","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/assets/fonts/benzin/Benzin-Semibold.woff","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:06.560Z","timestamp":1788175146560,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /assets/fonts/benzin/Benzin-Semibold.woff HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/earth_files/0dc69x6pqgnih.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:06 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:40:14 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3zGNRgo7GH0fHrRP6xRiE8AVx4uv569KUG1yACHC55Vi%2BesuROovppGDy2vU7Qdaoiv1vC7%2Fs%2BswvOooFVRlE%2BZad7XwxS2Gwy0s3KovuCF2C8GA%2FzpLWFL62A3NzHAdJvtB\"}]}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\npriority: u=3,i=?0\r\nage: 990\r\nvary: accept-encoding\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33ba36a090a5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":162205,"size_decoded":163099,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (23310)","md5":"bb4228b8762b5c5bd421966fff541995","sha1":"65e0eb176204ecd0b4ec5287e037d4a46f2a12ac","sha256":"852450195ebbef3f796f63c26b85361fd04ca7d8f2e7730640020caff3dae82d","sha512":"686dfaf3f4fddda1a0465ca699f38e162ab542b2b30abc05eb3e832419ae34452ebab286981f7dfa462077d6caf9fb164985ea47373c980595e8928302081d69","ssdeep":"1536:QjuBV0d+y4k0ovf4eGEY0vf4eGEY7Ev3dwsB/kentRIkf0EASgZyAIT/eUQP4xLr:QUK0/wSsB/Dt+XF715FFcLk9aXDFA3d4","tlshash":"49f309b091e2097bb16782d955e1e71d66add20bf4174918f3bc12f62f4aeed883318c","first_seen":"2026-08-31T11:03:21.848022Z","last_seen":"2026-08-31T11:20:11.732732Z","times_seen":2,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-08-31","alert":"Detects file containing Telegram Bot API","trigger":"earthmetaai.info/assets/fonts/benzin/Benzin-Semibold.woff","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/0gn768q4h1~m~.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:04.904Z","timestamp":1788175144904,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/0gn768q4h1~m~.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:04 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:40 GMT\r\netag: \"6a8bcb0c-1d4e3\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 995\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cQ66EQ7qyC9Z8N15mITf5gul5uzC5kkSB9X24yh9b87AjgZbqF5O1gpW0kkwU9XIlW%2BEPOclrqpaS4otOFs1jM%2FArJhuQL2aereV4%2FhhWvedW6AOLldCmscaUtvj2L4%2Fhy9G\"}]}\r\ncf-ray: a33ba35fa80e5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 120035\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/0xr3~mx18kcp7.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:04.914Z","timestamp":1788175144914,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/0xr3~mx18kcp7.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:04 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:40 GMT\r\netag: \"6a8bcb0c-158fc\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 994\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V4NUw5HRSsfjMLxE%2BFFBLUOiIWe6qvsMZwUvuQU4wW7%2Bz3JgDBmo7WYrFtdODfyu%2BeJEvLVrgT0MWa32t5Li9dz31TN3qkhweXnj3eTc7ZkLFLPlur8qdSoj%2BymvntaTUTSj\"}]}\r\ncf-ray: a33ba35fb8165693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 88316\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/turbopack-0q0rbx.7kqs~n.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:04.916Z","timestamp":1788175144916,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/turbopack-0q0rbx.7kqs~n.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:04 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:40 GMT\r\netag: \"6a8bcb0c-297b\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 995\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RPQa5bAg2C%2B8QE%2F0fvIEEp5bU4L6ymtrU%2FwuWP2%2BALnjoN6yKp7vNeI%2BnKWvpclJKamDVE5K5WtndlN3qe%2FocTTiwW1Yvt2Y6j%2Bq8rackOucXKpMMIv0p%2Bbjopuk8VEouRje\"}]}\r\ncf-ray: a33ba35fb8175693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10619\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/turbopack-0jkw0sacv8.ex.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:06.071Z","timestamp":1788175146071,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/turbopack-0jkw0sacv8.ex.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:06 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:40 GMT\r\netag: \"6a8bcb0c-297b\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 996\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZWt0uEK8XFqitOauVtbn%2FarZP37Xz2sELerjFFS8Fnc3FhSjrjE%2BjBvnVEZtn5XKqaTSh3zyX9OzorYntOWUL7Txbetea1%2Frjjzqs3lvX1JisNUwCGTgAfOeS7M0UwmKd4EX\"}]}\r\ncf-ray: a33ba366f8d35693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10619\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/0oiuc13w0d32z.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:06.263Z","timestamp":1788175146263,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/0oiuc13w0d32z.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:06 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:42 GMT\r\netag: \"6a8bcb0e-158fc\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 996\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kuAICStz4%2FwOeS1irVpiyKSyoiIIcLUXCVncRQ%2FJL7olcYWJoGik9Cgh7aGxmw%2FSbNMYL3CT2mEKSJf%2FtHPXH1FWVvLtvDWsAV9E9Ir7ECpvKkZUj6JpV40jT8JnEZmh1tto\"}]}\r\ncf-ray: a33ba36828ef5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 88316\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/turbopack-03cw3dmawc30_.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:06.333Z","timestamp":1788175146333,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/turbopack-03cw3dmawc30_.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:06 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:42 GMT\r\netag: \"6a8bcb0e-297b\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 996\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TWzYehb2OtFfb0sQXwudYZeXcENQ7BOcE4t2HJnqDE7YOGQJYMQRLAwWL9jCmnmctuuNxFPi8cYQiI%2BsxFhfef3x2NPrSoyTvcsbOsJmR7VwkM6MJYvOD%2BYI2H2HV%2BybpXSv\"}]}\r\ncf-ray: a33ba36898f65693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10619\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/95qk5d.jpg","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://earthmetaai.info/earth_files/95qk5d.html","date":"2026-08-31T11:19:06.651Z","timestamp":1788175146651,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/95qk5d.jpg HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/earth_files/95qk5d.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:06 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:40:08 GMT\r\netag: \"6a8bcb28-2377a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 991\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QchjUJBI6nLVDlRe5FOPOD9GG%2Fco7RndcCi7M%2BeJ%2BL4xQcbzIOlm2hbih%2BSsj1Ed%2FI7OoOft1mRWmqbbn6Rlv520nDbjf%2FyPMXyFCoYVvBdcSwhpwHEyGTy03eQE9%2Bv8U7YS\"}]}\r\ncf-ray: a33ba36a99195693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 145274\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":145274,"size_decoded":146217,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, comment: \"Lavc58.134.100\", baseline, precision 8, 3840x2160, components 3","md5":"cbfda81f773bccb923681ab948f91725","sha1":"32d9a32f919b4a875d9f7a98979b08c2a1442210","sha256":"b976cd4a619846f53f80f475535140615099cb19e60870ce390aaa8e45a0ea20","sha512":"594a0e537ee12ca82c18e5846b1ba7df3a90bec5f31b00f1baa307570b6112a10363a19a6bcd52e10be9631fb6f832d1b1d145a44bbab9b5c9ec62715cc623cb","ssdeep":"3072:aoMoBGUOjeYmZpDHSH0cDx7WuitTsUryp9iHfDcAnj:aoMoB/JZpSHtDc7t9mp9efDR","tlshash":"b0e39d23ff42ea76c58c2734d9e34b0c3b6344b893904607ea990d795dbb3487d9e6a1","first_seen":"2026-08-31T11:20:11.768483Z","last_seen":"2026-08-31T11:20:11.768483Z","times_seen":1,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/0zxkw.gw7wwd5.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:04.877Z","timestamp":1788175144877,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/0zxkw.gw7wwd5.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:04 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:40 GMT\r\netag: \"6a8bcb0c-efe4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 995\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VrizgHxzDi2U64TJoLw7x42nTI78cOy%2BCAFygZPnYRQhk%2FsMRtcJk8%2B6Y9Ob1wywMUclKIIbM%2BIqwTabsj9x6UsjSdl62Tuax8Dpeobe46eMYbTKGOnWMJAJnHKhwDdjXezk\"}]}\r\ncf-ray: a33ba35f7ffd5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 61412\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/05zq~t-vh66h5.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:04.887Z","timestamp":1788175144887,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/05zq~t-vh66h5.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:04 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:40 GMT\r\netag: \"6a8bcb0c-efe4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 995\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PHahxBmgm1qFQdVqcAhMwnCRBcv%2BR4KBFvnZ33dvI7XOjKn95kO%2Fc%2BUsyTIYsYTGiI47%2FcViPC9yH5xniOqe80WiMXOrGrPM8gwE3DVPMYKgc9qQqWiqASszR1G%2BdgCGszGv\"}]}\r\ncf-ray: a33ba35f88035693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 61412\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/turbopack-15-_estozh_g4.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:04.908Z","timestamp":1788175144908,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/turbopack-15-_estozh_g4.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:04 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:40 GMT\r\netag: \"6a8bcb0c-299c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 995\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jfuvDjv3g8WAMWWkz%2FXQeUld6ZBa3wgP3cET1dicFj98bXrA%2F8%2BfSTRKbc0ap1KBbDnmsLFJ2%2F3418KXPFtyQe6oeSbpHBb4%2BzhtMOj2a3kMsrXQr1piyqbeahAECQv%2BNipW\"}]}\r\ncf-ray: a33ba35fb8115693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10652\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/turbopack-024zy_i8fsm9g.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:04.942Z","timestamp":1788175144942,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/turbopack-024zy_i8fsm9g.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:04 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:40 GMT\r\netag: \"6a8bcb0c-297b\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 995\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zPPFtqldpsWoZCAMwHgLSlFpDzLj4fGc3Nzh24Gl1w%2BRsNfWPh7MoZyATjIx5XzffF4u8AYHwBhj2BhiSY5iZUXUtdK2oGZpMn2TjfAwG0r0QNAi0Hmh32nflLQa5wI63khU\"}]}\r\ncf-ray: a33ba35fe82f5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10619\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/10nv01z0qg9_o.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:06.519Z","timestamp":1788175146519,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/10nv01z0qg9_o.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:06 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:44 GMT\r\netag: \"6a8bcb10-158\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 996\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mJ%2B1e1f%2BayI3TAbfFSwR90wWiQgIJPmdHSm4m3PSIeZ%2FQXtapH10kiDTat9cf78ObTI%2BklqlmHDgyzlOnoHTlUDca%2Fa91Z5lfvBmMl43NAsI18rIqTBhLJrgExasHBMd%2FJdv\"}]}\r\ncf-ray: a33ba369c9065693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 344\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://earthmetaai.info/earth_files/J-iGqMEwFjY.html","date":"2026-08-31T11:19:06.719Z","timestamp":1788175146719,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://earthmetaai.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 28 Aug 2026 10:12:28 GMT\r\nexpires: Sat, 28 Aug 2027 10:12:28 GMT\r\ncache-control: public, max-age=31536000\r\nage: 263198\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":40941,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-08-31T15:30:33.572073Z","times_seen":980204,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/0x-8gb-~pl-lm.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:04.948Z","timestamp":1788175144948,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/0x-8gb-~pl-lm.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:04 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:42 GMT\r\netag: \"6a8bcb0e-d12f\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 995\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7oUGbk7URnY6a%2FagS%2B9FpmnXt3HoLFTMKmygiUAEhFQcJfQWEBE1Ryb37UmohD%2Fp%2FPz42vl3keAVcNSLB5diZF9GlPyyb0hps1mrT5NoQaucYx%2BSB7uuySda3sQGQeNnlaGU\"}]}\r\ncf-ray: a33ba35ff8335693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 53551\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/037hm2zt44~_8.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:04.898Z","timestamp":1788175144898,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/037hm2zt44~_8.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:04 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:40 GMT\r\netag: \"6a8bcb0c-5db29\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 995\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YL3jTnQ0OgT1NoP8oXwgDjnftCcU5APJJO0se8vgkvMs6bLGrTSvSyH3A4v%2F9qj7cZSc3M6aA2h4ibCOoO7Bo2t9PB9fueB4Yxm5Qw2OHk1NTr8krDZAzv6SgWsh2vzAFKVC\"}]}\r\ncf-ray: a33ba35fa80a5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 383785\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/turbopack-0aobie3ct9suv.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:04.891Z","timestamp":1788175144891,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/turbopack-0aobie3ct9suv.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:04 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:40 GMT\r\netag: \"6a8bcb0c-299c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 995\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pnit9B%2FcYKLbx%2FNgfo5nqUlsdnlIhSbVjRMhr8MsRr0nnw17kl%2B9vKXJKRYk31hBRViKcBrEtd6ulfeV1C7ROrT8LF8D5i%2FcFq67SrNzrQo9Ofj5MYQF6lE5NwpEqKd5Yg4B\"}]}\r\ncf-ray: a33ba35f98065693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10652\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/turbopack-044n1.czr4gc_.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:04.937Z","timestamp":1788175144937,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/turbopack-044n1.czr4gc_.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:04 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:40 GMT\r\netag: \"6a8bcb0c-299c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 995\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X1bSFPaQTdmYgd3yku1NzDoTCiiVdJpnENTodDpah2r0mz3Ca%2FeOev%2Fg4CK%2FdCTlqWYCpUiotvzuw8o6tvq4HyjOTYgK%2BEv6hjqbU6JHSvskjyjL%2FRl0y7PeE12eoi%2FU1ahL\"}]}\r\ncf-ray: a33ba35fd8295693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10652\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/0xvg53ngpa_zq.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:04.958Z","timestamp":1788175144958,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/0xvg53ngpa_zq.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:04 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:42 GMT\r\netag: \"6a8bcb0e-e4ef\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 995\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tSs12T%2Fj6iOioEovMLdeAMB2MI8ExvaGvs%2B0pmHzJfxLdypniZjmeNC3tTrYiFhRXspqljADjVcijo2QIV5Czu7TLCBi1OE2DLSGCDjekqCk9O%2FpQMD1cA%2BhdcS8dBVWaRsS\"}]}\r\ncf-ray: a33ba35ff83c5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 58607\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/turbopack-0k_aa2xgfmxh_.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:04.959Z","timestamp":1788175144959,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/turbopack-0k_aa2xgfmxh_.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:04 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:42 GMT\r\netag: \"6a8bcb0e-299c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 995\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7tWioxAqrsmDrLH6QmAQO34SKI3VYsWKpzLBl%2FM64HBPFdhRKo07gUj5KYZsQoi9LC6wDzxlhXXlVw2iB1bDky4qGJkUtBvDZHW7284aLvW1%2Bq7E9CDVTw9MAz67EOCDCuJ7\"}]}\r\ncf-ray: a33ba360083d5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10652\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/0tubehk.k-_9o.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:05.229Z","timestamp":1788175145229,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/0tubehk.k-_9o.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:05 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:44 GMT\r\netag: \"6a8bcb10-135\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 995\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u3BizYodXgEYmG3njSpJjR7YrdHOm1EJqtd2XIbLWPLm8QzbPO%2Fx7IXzTRHIzHLtzgatU4FXuJTtNA3OalXn3A37P19CYBTER4yzsRPcaePwMIgHGLUZPsIxgWLb%2Fcsa10AQ\"}]}\r\ncf-ray: a33ba361a8665693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 309\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/turbopack-0xe2mu-57f0dj.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:04.911Z","timestamp":1788175144911,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/turbopack-0xe2mu-57f0dj.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:04 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:40 GMT\r\netag: \"6a8bcb0c-297b\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 995\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jPw8CfVYR08txnKtFdj0%2FXBCmZSd7wbgRJ3Wxaujl46Zn82IpvBHbjfKTTH%2F1QhA8xUHIiNsIQUxxahjDwjcT3dxDLwZQsmYJj8XuR0QbZX24qEvBo0lfSQ%2F5S9HdiTwGWKp\"}]}\r\ncf-ray: a33ba35fb8145693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10619\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/0eadlloehmj6i.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:04.938Z","timestamp":1788175144938,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/0eadlloehmj6i.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:04 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:40 GMT\r\netag: \"6a8bcb0c-d7d9\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 995\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KhwShsjrJ9s6zVy8heUVpsfQcV6rsFiqNdgBA3REkVbwtX7dj6WTf%2BaByT2PZzpKpjHp2NZEUBFu4WsAb6vTb%2FIJdZVxQ5FYRRKXPEi5MiwvAg5%2BiRfIM1Cu4X2ci7QxIuQO\"}]}\r\ncf-ray: a33ba35fd82b5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 55257\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/0o0e1i3slhjbd.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:05.215Z","timestamp":1788175145215,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/0o0e1i3slhjbd.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:05 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:44 GMT\r\netag: \"6a8bcb10-10f\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 995\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=41tmRwqYpmcW%2Fhf%2B1AZdiFS3ZDSj3CDe9LJDO8CLNdkzMc4q9rz8aFopw5dmlDFHhwdqcN7kivGDTtMJu1tzIWx3od1IMnuE4dyQS5xdi3lKiYaL7LSWmK2dyZT9BTeEFnPm\"}]}\r\ncf-ray: a33ba36198595693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 271\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/J-iGqMEwFjY.html","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:06.558Z","timestamp":1788175146558,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/J-iGqMEwFjY.html HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:06 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:40:14 GMT\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npriority: u=4,i=?0\r\nage: 991\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=teK7QA%2F%2BxrcCDfjYj03OEbzlBukxJz1bLpDFoAPYuskUFM%2FKzTJUMDeQ7G0kOArNyJIwxKhXXScL3aOpToRDCisf1w0uw3aAu8ThbktaWj0r7gmcsU3mBuLfcTHo1fOZiaSO\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33ba36a09095693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":174954,"size_decoded":73853,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (52040)","md5":"433500c7c5dad29e3ed43a4faa06f9e9","sha1":"6891ad4d5256d544bb2751b4253a95342dbefdae","sha256":"57a5790a43fba1406a80528e8d95f53ac2dc11b316d2424a5357d6307ef9d6cb","sha512":"883ad95eb74be89b3cfbe204b9fe3c6dd1129959eefd748b49742a640b8dc6031bc05408fbbef095634120cfe3999e1a049543b29a04b1ce44b95a7ccee58eae","ssdeep":"1536:DuDxlpPMWHQYsMibqfkPNqHAjq50hIoB4TvEm/uWeirGuYjJCPS++g3q2diFdFV1:ynPUYDHArhIoB4TpsMSG69ddp","tlshash":"dd043b244918a8b2c593984bedb9ff3e6ca8023a47c5956dfcbbd34c01eda610e5f413","first_seen":"2026-08-31T11:20:11.769734Z","last_seen":"2026-08-31T11:20:11.769734Z","times_seen":1,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/vendor-modern.813f166e.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/earth_files/saved_resource.html","date":"2026-08-31T11:19:07.474Z","timestamp":1788175147474,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/vendor-modern.813f166e.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/earth_files/saved_resource.html\r\nCookie: _ga_P6QBGXDK3N=GS2.1.s1788175146$o1$g0$t1788175146$j60$l0$h0; _ga=GA1.1.1510774643.1788175147\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:07 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:40:12 GMT\r\netag: \"6a8bcb2c-56fbf\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 991\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0Q6%2Fs9rCSl9tlw2qT8zgJEdMfRMthoxDdStnNBUKVYTZyb%2F%2Fl8vyKrVnnLD5%2BNlMfN2ZNkyS%2Bst0qa5s1jjOlXE%2FYyVDTnMd4vWfDtZZY9smzPxE5E%2F1YDYNGOThGe4uHGDs\"}]}\r\ncf-ray: a33ba36fb9755693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 356287\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/turbopack-0j5vj5v0ys_ht.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:05.803Z","timestamp":1788175145803,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/turbopack-0j5vj5v0ys_ht.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:05 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:40 GMT\r\netag: \"6a8bcb0c-297b\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 996\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VF7LaCI7StwGuFMyMA%2FE2g9hL%2BIGx4Prjy1PXl7c3mDy8pJ5KbNZlyeZpGP6lNkFs2c9u%2BHRZmpie6B0r20gDO2kzvNoWBbwsxc%2BmPA4HJXl8Nv3FcxG21xQnH9BotOQhzBo\"}]}\r\ncf-ray: a33ba36548b95693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10619\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/0svpttkul~7i4.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:04.924Z","timestamp":1788175144924,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/0svpttkul~7i4.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:04 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:40 GMT\r\netag: \"6a8bcb0c-efe4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 995\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d8WljBwd2Iy29pYt9Sdda%2BIR2TuxUNucDHMVGWSk%2BYxdpsG9dpMkqwDr%2FBNNUfVfp%2FENIMa2tHY%2BIsWKL2Bc%2Fum%2F3QHoc8a6LEw6KNu9IZvcGBeFgct61Vsq4giVhZMElTUo\"}]}\r\ncf-ray: a33ba35fc81d5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 61412\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/turbopack-0j5vj5v0ys_ht.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:04.925Z","timestamp":1788175144925,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/turbopack-0j5vj5v0ys_ht.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:04 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:40 GMT\r\netag: \"6a8bcb0c-297b\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 995\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ehNK3VbNgTLeQ8QQu3O1iPoyz7ph8xNnpaput%2BWfLX%2BTqWD%2B%2FDwsxX2GlqBPYF6isDPAsfeeyVfDMGVfgKzL%2BoG407Y4RTEf8ZaM1oOIUZ2AYBKujngtWRXsn7nFU1Y3wTlY\"}]}\r\ncf-ray: a33ba35fd81e5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10619\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/0jr9drv_s.kea.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:04.932Z","timestamp":1788175144932,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/0jr9drv_s.kea.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:04 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:40 GMT\r\netag: \"6a8bcb0c-7f8e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 995\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F4ptchHqcVyj%2BF7umoSBVOypNliTRLKJsPlUHVdG3Zb0vLvIa32gMI0kQ58QQkC%2FLFry7pM5%2B%2F34s2j0r9Xc2OrlFpgAd5qjpF1rqNPoHVLRt3TGdCa3%2FWMnOmZxhyPWeLEB\"}]}\r\ncf-ray: a33ba35fd8285693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 32654\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/turbopack-03cw3dmawc30_.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:04.956Z","timestamp":1788175144956,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/turbopack-03cw3dmawc30_.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:04 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:42 GMT\r\netag: \"6a8bcb0e-297b\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 995\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CY5CSyChjI1sQxwF5KmwZSOglGZYU2HDohtavLCOi4CdMoDXOnkCZBfdD5rN75tJEK9mxIf%2Fq93SiAEaWgRvpWK6E83A5fmrm8uJ5Sl%2Fo8dwnUPGmf8f9qAFNGkwKD3g5WIT\"}]}\r\ncf-ray: a33ba35ff83b5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10619\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/032~x9vdaj703.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:05.544Z","timestamp":1788175145544,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/032~x9vdaj703.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:05 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:40 GMT\r\netag: \"6a8bcb0c-ee96\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 995\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lKVREXZqnrue%2FZjnwU86JX2nGYjLeKOcoT7xPR1mP3jvCjnwk6A2bEWMha3VZjp%2BZNWeLjnN%2BOkT2Vh9YU%2Fn4r1YJo234TNpFv6MRcqyje5cN7%2BC%2F0bYmOfGZxYNkk0mXNfD\"}]}\r\ncf-ray: a33ba363a89a5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 61078\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/turbopack-0ajm9eyjbc12p.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:05.717Z","timestamp":1788175145717,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/turbopack-0ajm9eyjbc12p.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:05 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:40 GMT\r\netag: \"6a8bcb0c-297b\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 996\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XTdh4n610eHQqsIAlIP4edWSRRfTcPRq%2B7Q07MgLiEsxaASsMx%2BsU0gMStxdZ8joG7v5o4xDPsVH2pwe6z73jfBP5KUBdCTedRGnod5ZOXCEq9McJxxIfw50Bs8A82wK2oyn\"}]}\r\ncf-ray: a33ba364b8b25693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10619\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/m=root,base(1)","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/earth_files/J-iGqMEwFjY.html","date":"2026-08-31T11:19:06.658Z","timestamp":1788175146658,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/m=root,base(1) HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/earth_files/J-iGqMEwFjY.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:06 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:40:10 GMT\r\netag: \"6a8bcb2a-120cac\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\nage: 990\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vkC%2BuqZ6DfaBjI0Xw46raU%2BFkOzLM93feh9aR1xch6g6%2FbvdWy%2FVO0sUL38f6CHTN5hiE55FNUKqp79d1OQBTpXdTHuJ0cq9rp%2B%2BshyP%2BtThOelD66huredch3I19av9yzpw\"}]}\r\ncf-ray: a33ba36aa91d5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1182892\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/0c1znmpdi.4uo.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:04.876Z","timestamp":1788175144876,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/0c1znmpdi.4uo.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:04 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:40 GMT\r\netag: \"6a8bcb0c-eba8\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 995\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vU7xhwQXtbK54jhO37uzbAbRVSVialq0fzi2d6c%2FrnRjAF7M4HD1jfEpI%2BJbwRAhv4UMFNTf5tFtLVY85JXvStrzuBKdX%2FncLBJSuuGWYrropuZHTYpmw%2BiT%2BU%2FSiy%2BWtktk\"}]}\r\ncf-ray: a33ba35f7ffc5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 60328\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/0v3jsmhbxj.4y.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:04.945Z","timestamp":1788175144945,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/0v3jsmhbxj.4y.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:04 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:40 GMT\r\netag: \"6a8bcb0c-10698\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 995\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hKuez386oDdpBlLFDo3svZDArzw9WtC2vMJxR1N1h0geSofmQ7d%2BiPH32fcUfrlNDPoIOdFr5HpA4ZU7cHMWnva%2B4N2Lf%2BpRcz6jGT49zLJVWhMQQFI%2B9YoRgeivGO%2BiJwWQ\"}]}\r\ncf-ray: a33ba35fe8305693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 67224\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/0w4xql6dyl982.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:05.216Z","timestamp":1788175145216,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/0w4xql6dyl982.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:05 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:44 GMT\r\netag: \"6a8bcb10-10e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 995\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RSk7Eps3zup%2Fr9MiGp%2FfKmaRg4ZaDsiFa3u42pSxmvG9gHKSf%2BnXQG7M%2FFQyzeNiCtP4t9ngdypXWpSmyDAfmF%2FVXqtL1B236%2Fplc7mK3KpEX190t28TtqQuQzpipTFrrG6M\"}]}\r\ncf-ray: a33ba361985a5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 270\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/turbopack-0q0rbx.7kqs~n.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:05.677Z","timestamp":1788175145677,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/turbopack-0q0rbx.7kqs~n.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:05 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:40 GMT\r\netag: \"6a8bcb0c-297b\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 996\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o7BDRsYulHKR3RHEWcqu0QuslXQDFjsv%2Flvmkjwg9RehjlgiapSUugN9cKR4YpXCiKkK3PuVknRr2EDueH%2BIcbUUb2RoEnoQVdgA2Ilj1UybG5z6FOa6As7wRhth%2BqmqG02a\"}]}\r\ncf-ray: a33ba36478ad5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10619\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/0jr9drv_s.kea.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:05.940Z","timestamp":1788175145940,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/0jr9drv_s.kea.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:05 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:40 GMT\r\netag: \"6a8bcb0c-7f8e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 996\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xwzx9wYhXmYsTUB%2BN30ZaVDYQoC1DUgoghcyH%2Fh%2BOazJHJjfJ8JJtkXXxLUkLLcZLdUHNN%2FcgwfNymRI1IM2mBGZDAK6tQ6rYnR2lAnNL9A4pQUwbvpNu3BqyyCWxx4xJ%2FUh\"}]}\r\ncf-ray: a33ba36628c65693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 32654\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/0o0e1i3slhjbd.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:06.798Z","timestamp":1788175146798,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/0o0e1i3slhjbd.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:06 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:44 GMT\r\netag: \"6a8bcb10-10f\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 996\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lpuWXsjwt2POLhEwbtSAl5j%2Bauhmwb6InL0ULp4lPc3XxuFpEgtggG9MBBBOCkiiXZWFQrznDjAtFB3NEhQaV5qKx0F0WxmxCcZkh2hybTaD86kXYGadEzug17csKupw8bOf\"}]}\r\ncf-ray: a33ba36b79365693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 271\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/10l914vq1.l4p.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:04.879Z","timestamp":1788175144879,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/10l914vq1.l4p.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:04 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:40 GMT\r\netag: \"6a8bcb0c-33735\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 995\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uYbTpAw0MWWlm7Ej3K88sevMNoYPI9SPo7zaTrmcLEbTscWCqqwAffSKqsvKr6MLo9jktB%2BfHPvz8muwHyvtaiQMXY%2FxNb9lrYlZxsKrNhFqMJ80XrSMr9RU4thQdr6xzKs0\"}]}\r\ncf-ray: a33ba35f8ffe5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 210741\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/0iz64tg342lny.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:05.439Z","timestamp":1788175145439,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/0iz64tg342lny.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:05 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:40 GMT\r\netag: \"6a8bcb0c-3a1c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 995\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FvzHXFYgRy8r%2FJ2oc%2BsBQjX4KHV2UgXpOTi4qSnhMGIgKXd7GUUUgdu5DSpapVVweEJerUQcMB%2B5QL7UAYVjWM7lDWaD3w3gw4T48h64jPLRoX5vPngtjlbxHGoXzuOxulsx\"}]}\r\ncf-ray: a33ba36308875693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14876\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-P6QBGXDK3N","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/earth_files/95qk5d.html","date":"2026-08-31T11:19:06.641Z","timestamp":1788175146641,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:41 GMT","end":"Mon, 02 Nov 2026 08:37:40 GMT"},"fingerprint":{"sha1":"DC:E6:38:9B:82:DB:20:21:19:E7:95:FC:30:E0:F0:F4:BC:CA:9A:1C","sha256":"2C:0E:42:66:EE:BA:84:59:3C:53:EB:87:C0:84:DD:32:F4:42:73:26:47:8C:4E:56:F9:5B:47:6C:AF:BA:C2:F9"}}},"request":{"raw":"GET /gtag/js?id=G-P6QBGXDK3N HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Mon, 31 Aug 2026 11:19:06 GMT\r\nexpires: Mon, 31 Aug 2026 11:19:06 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 157573\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":454441,"size_decoded":158177,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6033)","md5":"8e3b5841038a8c6679b52004d2eb4455","sha1":"03f20f947b7580f6f883719f253346be23ad6623","sha256":"dd2f7830a7a7051a0aeddf666103d6a07c5cca9d89a9f2cd4a3d3049fc99cb9a","sha512":"2fede970c6e1e28ab7a8e4314d6c267ab89e2c2a98358968869481bc8fe56b1b10b3e4159deebf1bad1ae22a08f957db7eff64a47b788ee75cd9caf7e86965fc","ssdeep":"6144:tP6NcAu4706mInkRDuccUQ/xEkY3UcKZE3O/yQcCk5P0jSHA:Qi1BPIUMZEwyQcRM2HA","tlshash":"5aa419cdb3c674229392f578903f018bb67a69a2b84cc895f28adcd42d3459a4177f7c","first_seen":"2026-08-31T11:20:11.771266Z","last_seen":"2026-08-31T11:20:11.771266Z","times_seen":1,"resource_available":true,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":4,"connect":15,"send":0,"wait":38,"receive":49,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/_clientMiddlewareManifest.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:04.896Z","timestamp":1788175144896,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/_clientMiddlewareManifest.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:04 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:40 GMT\r\netag: \"6a8bcb0c-60\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 995\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NSUZ5LJJAq4vd7jA4l4HFuvJOTF7%2B%2FRgN0Qm%2BDk3zxsNHd94ryH%2BiX9dRVhKYi5efwgVvTC4qXr37PyqUi5dyG9MCdBZ1GmCzEM6Ea4fyQjVUs5E76%2B0LKrEvGESWpIG2Fhs\"}]}\r\ncf-ray: a33ba35fa8095693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 96\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/0u0~ac.ey1svo.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:05.232Z","timestamp":1788175145232,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/0u0~ac.ey1svo.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:05 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:44 GMT\r\netag: \"6a8bcb10-114\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 995\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cZ4akCmcgvcYZ359bs2244R7PXpcP4lok5AqSv7gWnfLaKCcJt%2BfwQTXW4VW4rbsaIJli7Udoup91y1VSWrKWoeqFvv%2BhyVlCLrYLmBOIlMQVdMs6tsFxH0PtqlTKF4ei018\"}]}\r\ncf-ray: a33ba361b8685693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 276\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/0.a-ubn1vy._9.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:05.456Z","timestamp":1788175145456,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/0.a-ubn1vy._9.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:05 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:40 GMT\r\netag: \"6a8bcb0c-b2ce\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 995\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WGDeiEPageA%2B85W0oVLb24igRmNTID7hodZs8%2ByqtCgyYovRbIEA5Du8U%2FE9jMsDNTCorpXY9BD2Rbd7xO8ifrZIY6R6Pzwn%2B9XAyLqGab3okv4drW2PtzzPhCuAnh8x%2B6Km\"}]}\r\ncf-ray: a33ba36318895693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 45774\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/turbopack-01w6br62u27mi.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:06.187Z","timestamp":1788175146187,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/turbopack-01w6br62u27mi.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:06 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:42 GMT\r\netag: \"6a8bcb0e-299c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 996\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Jsj0k841HeA9OzXyXG9utoiE1qe%2BqYc1Pc8cZ54vIMn%2B9XredVblFmOARRTCsNf27Cgc6xTBdjwdyTAW2Ds5ti%2Fc4xBqJPbmyemohrL37OVujUyiiYXjP%2FNF5juvpYeTC8Qh\"}]}\r\ncf-ray: a33ba367a8e55693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10652\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/assets/fonts/pnova/ProximaNova-Semibold.woff","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:06.514Z","timestamp":1788175146514,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /assets/fonts/pnova/ProximaNova-Semibold.woff HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/earth_files/0dc69x6pqgnih.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:06 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:40:14 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ls8zhmSrC4HwpLNcKJRqlNRYtpAbAmFT31eZrZSiAk%2BOaVbIi65UUfQW9BNpa1iPXT7H5Ku47CYHXbMPmVR5q2j%2FcHwZkOTSKAzld6EXQiAww3kS0KiYhjcx6pdhkzpIUSgR\"}]}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\npriority: u=3,i=?0\r\nage: 994\r\nvary: accept-encoding\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33ba369b9055693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":162205,"size_decoded":163093,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (23310)","md5":"bb4228b8762b5c5bd421966fff541995","sha1":"65e0eb176204ecd0b4ec5287e037d4a46f2a12ac","sha256":"852450195ebbef3f796f63c26b85361fd04ca7d8f2e7730640020caff3dae82d","sha512":"686dfaf3f4fddda1a0465ca699f38e162ab542b2b30abc05eb3e832419ae34452ebab286981f7dfa462077d6caf9fb164985ea47373c980595e8928302081d69","ssdeep":"1536:QjuBV0d+y4k0ovf4eGEY0vf4eGEY7Ev3dwsB/kentRIkf0EASgZyAIT/eUQP4xLr:QUK0/wSsB/Dt+XF715FFcLk9aXDFA3d4","tlshash":"49f309b091e2097bb16782d955e1e71d66add20bf4174918f3bc12f62f4aeed883318c","first_seen":"2026-08-31T11:03:21.848022Z","last_seen":"2026-08-31T11:20:11.732732Z","times_seen":2,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-08-31","alert":"Detects file containing Telegram Bot API","trigger":"earthmetaai.info/assets/fonts/pnova/ProximaNova-Semibold.woff","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/turbopack-0q3uxrkuy9en6.js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:04.921Z","timestamp":1788175144921,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/turbopack-0q3uxrkuy9en6.js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:04 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:40 GMT\r\netag: \"6a8bcb0c-297a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 995\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9n9INIjpcRuzmlXZvP6Q1oRyOsMfQFcFjqYU%2FzKpjd5Ohiv51hoNzXIzt%2FH31kDhin8YW8ojsFPV298NgMexz8bGumuCN9AXJpueDSYopb1XampDUj1sSxysc4kO5M51wuIo\"}]}\r\ncf-ray: a33ba35fc81b5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10618\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earthmetaai.info/earth_files/0s8e5v3r4c9n..js.download","fqdn":"earthmetaai.info","domain":"earthmetaai.info","tld":"info"},"ip":{"addr":"104.21.59.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:05.222Z","timestamp":1788175145222,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earthmetaai.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 02:29:58 GMT","end":"Sun, 22 Nov 2026 03:28:47 GMT"},"fingerprint":{"sha1":"7A:5F:FE:FB:63:8E:59:A2:EA:15:5E:28:F2:E9:AC:58:A6:6B:44:57","sha256":"EB:05:92:7E:1A:3B:C2:28:42:79:32:BD:80:34:BA:12:0A:84:F6:28:C4:D5:CC:8F:F7:E8:93:EF:81:BF:F0:9C"}}},"request":{"raw":"GET /earth_files/0s8e5v3r4c9n..js.download HTTP/1.1\r\nHost: earthmetaai.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://earthmetaai.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:19:05 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 04:39:44 GMT\r\netag: \"6a8bcb10-139\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 995\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RqCpZWcUlyQQgR2aPzasjEj1%2BXEyQBm9vPdu4PqnwN5R8G9XP4PZrt9phuKvvS5CpkwoqFiuPR3IX7PdEVqw9XGl6bXqktg71bjY%2BTcBl0%2BtXorYcyzw12VqaN1xMcgfv7Qq\"}]}\r\ncf-ray: a33ba361a8605693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 313\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"earthmetaai.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.telegram.org/bot8896894786:AAFecM1VWnMa-pajYz-PviS6guvU1YzlEEU/sendMessage","fqdn":"api.telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.166.110","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://earthmetaai.info/","date":"2026-08-31T11:19:05.449Z","timestamp":1788175145449,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Tue, 11 Nov 2025 15:14:09 GMT","end":"Sun, 13 Dec 2026 15:14:09 GMT"},"fingerprint":{"sha1":"EC:27:13:72:1E:6C:94:9F:47:59:A4:24:4F:AB:9B:02:E3:6E:54:41","sha256":"64:47:03:9A:C9:ED:B9:03:8C:07:6E:AA:3D:BF:75:4B:4C:C1:4E:C1:A5:8C:83:2D:3E:FD:0C:E7:F7:82:C2:71"}}},"request":{"raw":"OPTIONS /bot8896894786:AAFecM1VWnMa-pajYz-PviS6guvU1YzlEEU/sendMessage HTTP/1.1\r\nHost: api.telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://earthmetaai.info/\r\nOrigin: https://earthmetaai.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\nserver: nginx/1.30.1\r\ndate: Mon, 31 Aug 2026 11:19:05 GMT\r\naccess-control-max-age: 86400\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: content-type\r\naccess-control-expose-headers: Content-Length,Content-Type,Date,Server,Connection\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":334,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":0,"dns":0,"connect":22,"send":0,"wait":26,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}