PlatformsDiscordBackground

discordApiAuthLocationMetadata

Domainbackground
Kindendpoint
doc_id—
Pathdiscord.com/api/auth/location-metadata
Sends—
Readsconsent_required, country_code, minimum_age, promotional_email_opt_in.required, promotional_email_opt_in.pre_checked
Called fromruns/inspect/20261030T222341_sourcedandsoldtothehighestbidder/script1.js:208 app_store_parental_revocation, runs/inspect/20261030T222341_sourcedandsoldtothehighestbidder/script1036.js:1 parse, runs/inspect/20261030T222341_sourcedandsoldtothehighestbidder/script1221.js:2 anonymous, runs/inspect/20261028T074137_sourcedandsoldtothehighestbidder/script1245.js:2 anonymous
reaev_065e7ad37dcb5911d240f9de7d6e2882220c5a8d7c025d92b46a23de59cf297c

Seen 3 time(s) in 3 run(s).

ActionOur stepTimesStatusTookAfter step startErrors
inspectstep 3: goto /login1200321 ms5482 ms—
inspectstep 1: goto /login1200385 ms6572 ms—
inspectstep 1: goto /channels/@me1200688 ms10902 ms—

What it sent and what came back (the newest 3 from our runs)

Read from each run's own recording (rule 73), secrets and signed link tokens taken out. Kept in ~/.logCli/rea/clientFacts.json, so it stays after the run is pruned.

runs/inspect/20261030T222341_sourcedandsoldtothehighestbidder, step 1: goto /channels/@me: 200, 688 ms

Sent:

null

Answered:

{
  "consent_required": false,
  "country_code": "VN",
  "minimum_age": null,
  "promotional_email_opt_in": {
    "required": true,
    "pre_checked": false
  }
}

runs/inspect/20261028T074137_sourcedandsoldtothehighestbidder, step 1: goto /login: 200, 385 ms

Sent:

null

Answered:

{
  "consent_required": false,
  "country_code": "VN",
  "minimum_age": null,
  "promotional_email_opt_in": {
    "required": true,
    "pre_checked": false
  }
}

runs/inspect/20261028T062914_sourcedandsoldtothehighestbidder, step 3: goto /login: 200, 321 ms

Sent:

null

Answered:

{
  "consent_required": false,
  "country_code": "VN",
  "minimum_age": null,
  "promotional_email_opt_in": {
    "required": true,
    "pre_checked": false
  }
}

What it does

Tells the login page where the request comes from (country, consent needed), so it shows the right consent and age text.

What our machine does with it

Read only as a recording: the account has no proxy (like Reddit), so this is this machine's own exit.

What can go wrong

The account carries on whatever it answers; a failure here changes nothing for our steps.