Every layer carries its own provenance line. Hover or click the text under a layer name to read it in full. That line says where the data came from and what it cannot tell you. A layer without one would be decoration.
Nothing here is an attack map. Points are plotted only where the source supplies a real coordinate, or where a claim names a country — in which case the marker sits on that country’s centre and is drawn as a wide ring, because a country is not a place. No arcs are drawn between countries: animated attack arcs imply an origin, a target and a path, none of which this data contains.
Leak-site claims are attacker statements. Groups post false claims, recycle old breaches and repost each other. A named organisation on this map has been claimed, not confirmed compromised.
An empty layer is not an all-clear. It means the source returned nothing or failed — both are shown differently in the layer list, and a failed layer never renders as quiet.
Weather is two layers: global and US. Global severe weather comes from GDACS (the UN/EC disaster system) \u2014 worldwide but coarse, marking region-level cyclones, floods and droughts. US weather alerts come from the NWS \u2014 county-level detail, but US territory only. Neither is a fault of the other: outside America the US layer is blank by coverage, not calm. Fire is thermal, not flame. Fire markers are NASA FIRMS satellite thermal anomalies \u2014 a gas flare or furnace triggers them exactly like a wildfire, so they are labelled thermal detections and treated as candidates, not confirmed fires. The fire layer needs a free key you supply; it is never shipped in this file.
Conflict zones are a curated list, not a live feed. The conflict layer is a hand-maintained set of known war and tension zones with a visible compile date, adapted from the MIT-licensed Osiris project. Markers are approximate region centroids and severity bands \u2014 not front lines, not real-time events. It goes stale by nature; the World incidents (GDELT) layer is the live companion, and \u201cno marker\u201d never means \u201cno conflict\u201d.
Live IOCs are infrastructure, not attacks. The IOC layer plots malware infrastructure reported to abuse.ch \u2014 where an indicator is an IP, it is geolocated to the HOST, which is usually rented and often in a third country. It is not an attacker, not a target, and there are deliberately no arcs: a line between two points would invent an attack path this data does not contain. Domain and hash indicators have no location and appear in the list only. EPSS is a forecast of exploitation probability, not observed exploitation.
Cable arcs are approximate, not surveyed routes. The lines between landing points are great-circle approximations showing which coasts depend on which corridors. The real route geometry is TeleGeography\u2019s and is not licensed to redistribute, so nothing here claims to be where a cable physically lies \u2014 only which landings are trunk-connected.
Aircraft are the military subset, live but incomplete. Positions come from ADSB.lol\u2019s /mil ADS-B feed (ODbL) \u2014 broadcast by the aircraft themselves, so anything on a blocked or spoofed transponder is absent or wrong, and community coverage thins over oceans. Not all air traffic, and empty sky is not proof of none.
The maritime layer is disruption, not traffic. NGA navigational warnings \u2014 hazards, exercises and closures with real coordinates \u2014 plus static cable landing points for context. It is not vessel tracking: live AIS needs a key and a backend and the main free source forbids direct browser use, so ships are deliberately absent. An empty patch means no warning is in force, not an empty sea.
Satellite positions are calculated, not observed. SGP4 propagates a published element set forward to now. Accuracy decays as the element set ages, so each object shows the age of its own data and anything over a week old is drawn hollow. Classified payloads are not in the public catalogue at all — a quiet region of that layer means nothing is published there.
No tile server, no map library, no CDN. The geometry is Natural Earth, pre-rendered into this file and projected with plain arithmetic. It loads on a network that blocks everything else, and no third party learns which part of the world you are looking at.
Close