trenchcoat
Free · no sign-up
Website report · 5 h ago

www.rockstargames.com

“Rockstar Games”

Template-written 37 evidence items Code reader analysed 1 scripts
What this means for you

Rockstar Games talked to 7 outside services on a first visit, including 2 that measure visits or show ads.E14E7

  • An AI agent used the site and saw 0 of 1 claimed features working.E35
  • Live data / analytics: “…disable Cookies on your device or set your browser to alert you when we or others send…: The quoted text describes the visitor's own browser settings, which can't be changed or checked from within the website. The /cookies policy page loaded and links to the Microsoft, Mozilla, Google and Apple help pages about managing cookies.E35
  • Also noticed, Analytics and consent requests on page load: Opening /cookies sent requests to google-analytics.com/g/collect, sentry.io, cdn.cookielaw.org and geolocation.onetrust.com while the cookie banner was still unanswered. Clicking EDIT COOKIE SETTINGS sent another google-analytics collect request.E35E36
  • Also noticed, Cookie settings panel did not visibly open: Clicking EDIT COOKIE SETTINGS on /cookies didn't change the visible page. Clicking the banner's COOKIE SETTINGS button timed out after 4 seconds.E36E37
  • Tech check: the site claims live data / analytics, and its public page shows matching evidence.E32E28E29E30
  • Before you click anything, the page loads analytics or ad services: Google Analytics / Tag Manager.E14E7
  • 4 cookies were set in your browser, all by the site itself.E16E17E18E19

Tech check

What the site says about itself, next to what its public page actually loads. Facts only, no verdict: you decide.

Evidence found

Live data / analytics

“…disable Cookies on your device or set your browser to alert you when we or others send Cookies to your device. Ple…”E32

Calls to its own backend: /auth/ping-bearer.json, /connect/cors/check/rsg, /graphqlE28E29E30

Calls its own backend /auth/ping-bearer.json, /connect/cors/check/rsg, /graphqlE28E29E30
Wallet code none seen
Contract calls in its code none seen
Talks to AI services none seen
Live connections none seen

What the AI agent tried

An AI agent (claude-opus-5-5) used the site in our sandbox for 4 steps and saw 0 of 1 claimed feature working. It can't connect a wallet, pay, sign or log in, so those features count as "couldn't test". What it reports is what it observed, not a verdict.

Couldn't test

Live data / analytics: “…disable Cookies on your device or set your browser to alert you when we or others send…

The quoted text describes the visitor's own browser settings, which can't be changed or checked from within the website. The /cookies policy page loaded and links to the Microsoft, Mozilla, Google and Apple help pages about managing cookies.E35

Also noticed

Things the agent saw along the way that aren't among the site's claims. Not counted above.

Noticed

Analytics and consent requests on page load

Opening /cookies sent requests to google-analytics.com/g/collect, sentry.io, cdn.cookielaw.org and geolocation.onetrust.com while the cookie banner was still unanswered. Clicking EDIT COOKIE SETTINGS sent another google-analytics collect request.E35E36

Noticed

Cookie settings panel did not visibly open

Clicking EDIT COOKIE SETTINGS on /cookies didn't change the visible page. Clicking the banner's COOKIE SETTINGS button timed out after 4 seconds.E36E37

What it is

  • The Internet Archive first saved this site on 1999-11-17 (9853 days ago).E33
  • The site describes itself as: “The official home of Rockstar Games”E2
  • It's built with React and Remix / React Router (common tools for building web apps).E20E21
  • Notable building blocks in its code: GraphQL client.E22
  • In your browser it runs compiled WebAssembly code in your browser.E25
  • It has sections such as /newswire, /videos, /downloads, /rockstar-games-launcher, /VI and /games.E31
  • While loading, it called 3 endpoints on its own servers, such as /auth/ping-bearer.json, /connect/cors/check/rsg and /graphql.E28E29E30

Where your data goes

Analytics & trackingCount visits and record what you do on the page. 2
www.google-analytics.comGoogle Analytics / Tag Manager: Google's visitor analytics and tag loader 3×E14
www.googletagmanager.comGoogle Analytics / Tag Manager: Google's visitor analytics and tag loader 2×E7
Error & performance monitoringReport crashes and speed to the developers. 1
o432808.ingest.sentry.ioSentry: crash and error reports 1×E6
Consent & bot protectionCookie banners, CAPTCHAs and bot checks. 2
cdn.cookielaw.orgOneTrust: cookie consent banner 12×E8
geolocation.onetrust.comOneTrust: cookie consent banner 1×E9
CDNs & hostingDeliver files (scripts, images) quickly from servers near you. 1
media-rockstargames-com.akamaized.netAkamai: CDN 177×E5
Not identifiedServices we don't have in our list yet. 1
s.rsg.scnot identified 1×E15

How key features work

Sign-in and accounts

Sign-in and account features show up in its code or traffic (/auth/ping-bearer.json).E28

/auth/ping-bearer.json

Loading its content

Its content loads from its own API while you browse (/auth/ping-bearer.json, /connect/cors/check/rsg and /graphql).E28E29E30

/auth/ping-bearer.json/connect/cors/check/rsg/graphql

Drawing and editing in the browser

The page draws and edits graphics in your browser using WebAssembly and the canvas.E25E27

webassemblycanvas

Measuring what you do

Visits and clicks are measured with Google Analytics / Tag Manager and Google tag (gtag.js) (found in its traffic or its code).E14E7E23

Google Analytics / Tag ManagerGoogle tag (gtag.js)

Cookies and storage

Names only. We never store the values.

CookieSet forKeptWhose
rockstarweb_lang.prodE16rockstargames.com until you close the browserthe site
session-idE17signin.rockstargames.com until you close the browserthe site
CultureE18signin.rockstargames.com about 30 daysthe site
OptanonConsentE19rockstargames.com about 365 daysthe site

Pages and API calls

Pages it links to

//newswire/videos/downloads/rockstar-games-launcher/VI/games/gta-online/gta-plus/reddeadonline/grand-theft-auto-vi-collection/search/contact/careers/community-resources/account/corpinfo/privacy/cookies/legal/ccpa

Endpoints

Called while loading (seen) or named in the code (code).

www.rockstargames.com/auth/ping-bearer.jsonseenE28
signin.rockstargames.com/connect/cors/check/rsgseenE29
cms-prod.ros.rockstargames.com/graphqlseenE30

Evidence

Every sentence above points to one of these. Code references show the file, line:column and the short identifier that matched, never the site's code itself.

E1
Page title: Rockstar Games
page title · https://www.rockstargames.com/
E2
Page description: The official home of Rockstar Games
page description · https://www.rockstargames.com/
E3
Site name: Rockstar Games
page site_name · https://www.rockstargames.com/
E4
3 request(s) to www.rockstargames.com
types: 2 fetch, 1 document
GET https://www.rockstargames.com/ · fetch · 3 requests · network recording
E5
177 request(s) to media-rockstargames-com.akamaized.net
types: 135 script, 21 stylesheet, 8 image
GET https://media-rockstargames-com.akamaized.net/mfe-r19/prod/@rockstargames/mfe/12.0.0/cb0d44eac48a919cfb30721663f33c9806674de6532de9f3f… · script · 177 requests · network recording
E6
1 request(s) to o432808.ingest.sentry.io
types: 1 fetch
GET https://o432808.ingest.sentry.io/api/4504565542748160/envelope/ · fetch · network recording
E7
2 request(s) to www.googletagmanager.com
types: 2 script
GET https://www.googletagmanager.com/gtm.js · script · 2 requests · network recording
E8
12 request(s) to cdn.cookielaw.org
types: 5 fetch, 3 script, 2 image
GET https://cdn.cookielaw.org/scripttemplates/otSDKStub.js · fetch · 12 requests · network recording
E9
1 request(s) to geolocation.onetrust.com
types: 1 xhr
GET https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location · xhr · network recording
E10
1 request(s) to signin.rockstargames.com
types: 1 fetch
GET https://signin.rockstargames.com/connect/cors/check/rsg · fetch · network recording
E11
1 request(s) to cms-prod.ros.rockstargames.com
types: 1 fetch
GET https://cms-prod.ros.rockstargames.com/graphql · fetch · network recording
E12
55 request(s) to cms-static-prod.ros.rockstargames.com
types: 55 image
GET https://cms-static-prod.ros.rockstargames.com/images/18izrhn535ym/6IMRusG8LCARv8hFZyqq10/0616dd29824356170625c643bf480025/6IMRusG8LCAR… · image · 55 requests · network recording
E13
1 request(s) to graph.rockstargames.com
types: 1 fetch
GET https://graph.rockstargames.com/ · fetch · network recording
E14
3 request(s) to www.google-analytics.com
types: 3 fetch
GET https://www.google-analytics.com/g/collect · fetch · 3 requests · network recording
E15
1 request(s) to s.rsg.sc
types: 1 image
GET https://s.rsg.sc/shared/onetrust/cross.png · image · network recording
E16
Cookie 'rockstarweb_lang.prod' set for rockstargames.com
session cookie
cookie rockstarweb_lang.prod on rockstargames.com · value not stored
E17
Cookie 'session-id' set for signin.rockstargames.com
session cookie
cookie session-id on signin.rockstargames.com · value not stored
E18
Cookie 'Culture' set for signin.rockstargames.com
kept for about 30 days
cookie Culture on signin.rockstargames.com · value not stored
E19
Cookie 'OptanonConsent' set for rockstargames.com
kept for about 365 days
cookie OptanonConsent on rockstargames.com · value not stored
E20
React found in the code
media-rockstargames-com.akamaized.net…f69487a5d43972973bda8bce8974d0/js/a0bbeb4d3f679cb3f19237cda1ccb87d.js @ 2:63912 · “react.element” · pattern scan
E21
Remix / React Router found in the code
media-rockstargames-com.akamaized.net…f69487a5d43972973bda8bce8974d0/js/9d97bf25d391392e1ed3000539f96b25.js @ 2:111852 · “__reactRouterContext” · pattern scan
E22
GraphQL client found in the code
media-rockstargames-com.akamaized.net…f69487a5d43972973bda8bce8974d0/js/8254ccb44bc183ca4c6b35e92d8514e5.js @ 1:16367 · “__typename” · pattern scan
E23
Google tag (gtag.js) found in the code
www.rockstargames.com/ (page HTML) @ 5:67 · “googletagmanager.com/gtag” · pattern scan
E24
Sentry found in the code
media-rockstargames-com.akamaized.net…3f33c9806674de6532de9f3f6c19b4e3075b894/systemjs-module-federation.js @ 2:13817 · “__SENTRY__” · pattern scan
E25
Uses the browser ability: webassembly
runs compiled WebAssembly code in your browser
media-rockstargames-com.akamaized.net…3f33c9806674de6532de9f3f6c19b4e3075b894/systemjs-module-federation.js @ 2:11265 · “WebAssembly.compileStreaming(” · pattern scan
E26
Uses the browser ability: web_worker
runs work in a background thread
media-rockstargames-com.akamaized.net…3f33c9806674de6532de9f3f6c19b4e3075b894/systemjs-module-federation.js @ 2:279621 · “new Worker(” · pattern scan
E27
Uses the browser ability: canvas
draws graphics on a canvas
media-rockstargames-com.akamaized.net…3f33c9806674de6532de9f3f6c19b4e3075b894/systemjs-module-federation.js @ 2:174634 · “getContext("2d"” · pattern scan
E28
The page called /auth/ping-bearer.json on www.rockstargames.com (POST)
POST https://www.rockstargames.com/auth/ping-bearer.json · fetch · network recording
E29
The page called /connect/cors/check/rsg on signin.rockstargames.com (POST)
POST https://signin.rockstargames.com/connect/cors/check/rsg · fetch · network recording
E30
The page called /graphql on cms-prod.ros.rockstargames.com (POST)
POST https://cms-prod.ros.rockstargames.com/graphql · fetch · network recording
E31
35 links to pages on the same site
page links · https://www.rockstargames.com/ · /, /newswire, /videos, /downloads, /rockstar-games-launcher, /VI, /games, /gta-online, /gta-plus, /reddeadonline, /grand-theft-auto-vi-collection, /search
E32
The site says: “…disable Cookies on your device or set your browser to alert you when we or others send Cookies to your device. Ple…”
page text · https://www.rockstargames.com/ · …disable Cookies on your device or set your browser to alert you when we or others send Cookies to your device. Ple…
E33
The Internet Archive first saved rockstargames.com on 1999-11-17 and has snapshots from 2000 different days
page web archive · https://web.archive.org/web/19991117123644/rockstargames.com
E34
Agent step 1: view
AI agent step 1 · view on /
E35
Agent step 2: go /cookies
AI agent step 2 · go on /cookies · page called POST www.google-analytics.com/g/collect, POST www.google.com/g/collect, GET media-rockstargames-com.akamaized.net/mfe-r19/importmaps/e86455/prod.json, POST o432808.ingest.sentry.io/api/4504565542748160/envelope/, GET media-rockstargames-com.akamaized.net/mfe-r19/importmaps/92ea64/prod.json, GET cdn.
E36
Agent step 3: click EDIT COOKIE SETTINGS
AI agent step 3 · click on /cookies · page called POST www.google-analytics.com/g/collect
E37
Agent step 4: click COOKIE SETTINGS (not done: Locator.click: Timeout 4000ms exceeded.)
AI agent step 4 · click on /cookies

Limits

  • We only see what your browser sees: code and requests on a first visit, without logging in or accepting cookie banners. What the servers do with data is invisible from outside.
  • Site code is usually minified (compressed), so names are partly lost and some code may be only partly analysed.
  • Some trackers only load after you accept cookies or log in, so the real list can be longer.
  • We visited from a server in the United States. Sites load different trackers and cookie banners in different countries (visitors in the EU usually get a consent banner first).
  • The tech check compares the site's own words with what its public page loads. Work done on servers, in private code or in separate apps isn't visible here, so 'nothing found' means not visible on the public page, not that it doesn't exist.
  • This text was written from fixed templates because no AI writer was available. It uses exactly the same evidence.
  • The code reader hit its size budget on parts of 60 large bundle file(s); those parts weren't fully analysed.

Facts, not judgements: this page describes what the code and traffic show, not anyone's intent. Not financial advice. Case id F0TQvIcs.