shop.spacex.com
“Starlink Sticker Pack – SpaceX Store”
Tech check
What the site says about itself, next to what its public page actually loads. Facts only, no verdict: you decide.
The page doesn't make tech claims we check for (AI, on-chain, wallets, trading, own chain, staking, live data, an app).
What it is
- The Internet Archive first saved this site on 2012-10-02 (5141 days ago).E62
- The site describes itself as: “Details:• Includes 10 custom designed Starlink stickers”E2
- It's built with jQuery (common tools for building web apps).E33
- Notable building blocks in its code: Google Maps.E34
- In your browser it can copy text to your clipboard and saves small bits of data in your browser.E36E37
- It has sections such as /policies, /collections, /account, /cart, /products and /pages.E56E57
- While loading, it called 6 endpoints on its own servers, such as /apps/locksmith/ping, /api/unstable/graphql.json, /.well-known/shopify/monorail/unstable/produce_batch and 3 more.E39E40E41E42
Where your data goes
PaymentsHandle card or wallet payments. 3
| cdn.shopify.com | Shopify: online-store checkout | 22×E6 |
| otlp-http-production.shopifysvc.com | Shopify: online-store checkout | 5×E13 |
| extensions.shopifycdn.com | Shopify: online-store checkout | 1×E18 |
CDNs & hostingDeliver files (scripts, images) quickly from servers near you. 1
| polyfill-fastly.io | Polyfill services: browser compatibility scripts | 1×E9 |
Not identifiedServices we don't have in our list yet. 9
| api.boldcommerce.com | not identified | 6×E12 |
| shop.app | not identified | 3×E7 |
| h30-deploy.obviyo.net | not identified | 2×E15 |
| media.9gtb.com | not identified | 2×E17 |
| api.obviyo.net | not identified | 1×E14 |
| config.gorgias.chat | not identified | 1×E16 |
| h30-deploy.hiconversion.com | not identified | 1×E11 |
| limits.minmaxify.com | not identified | 1×E10 |
| static.boldcommerce.com | not identified | 1×E8 |
How key features work
Payments
Payments are handled by Shopify, so card or payment details go to them, not only to this site.E6E13E18
ShopifyLoading its content
Its content loads from its own API while you browse (/apps/locksmith/ping, /api/unstable/graphql.json, /.well-known/shopify/monorail/unstable/produce_batch, /recommendations/products and 2 more).E39E40E41E42E43
/apps/locksmith/ping/api/unstable/graphql.json/.well-known/shopify/monorail/unstable/produce_batch/recommendations/products/api/collect/shopify_pay/accelerated_checkoutCookies and storage
Names only. We never store the values.
| Cookie | Set for | Kept | Whose |
|---|---|---|---|
| localizationE19 | shop.spacex.com | about 365 days | the site |
| cart_currencyE20 | shop.spacex.com | about 91 days | the site |
| _shopify_essentialE21 | shop.spacex.com | about 365 days | the site |
| __cf_bmE22 | boldcommerce.com | about 0 days | other company |
| _hc_expE23 | spacex.com | about 365 days | the site |
| _hc_cartE24 | spacex.com | about 365 days | the site |
| __cf_bmE25 | obviyo.net | about 0 days | other company |
| _hc_vidE26 | spacex.com | about 365 days | the site |
| _hc_sesE27 | spacex.com | about 0 days | the site |
| _shop_app_essentialE28 | shop.app | about 365 days | other company |
| cartE29 | shop.spacex.com | about 91 days | the site |
| __cf_bmE30 | shop.spacex.com | about 0 days | the site |
localStorageE31: signInWithShop:cartSyncTransferAttemptedAt, _hc_edg, recentlyViewedProducts, _hc_d
sessionStorageE32: BOLD_SHOP_PRE_ENABLED_TIMESTAMP, consentHeader, BOLD_SHOP_PRE_ENABLED, _shs_state
Pages and API calls
Pages it links to
/policies/collections/account//cart/products/pages/searchM32.7374478,5.617 C29.1154478,1.995 24.2994478,0 19.1774478,0 C14.0544478,0 9.23944778,1.995 5.61744778,5.617 C-1.08555222,12.319 -1.91855222,24.929 3.81344778,32.569 L19.1774478,54.757 L34.5184478,32.6 C40.2734478,24.929 39.4404478,12.319 32.7374478,5.617 Z M19.3544478,26 C15.4954478,26 12.3544478,22.859 12.3544478,19 C12.3544478,15.141 15.4954478,12 19.3544478,12 C23.2134478,12 26.3544478,15.141 26.3544478,19 C26.3544478,22.859 23.2134478,26 19.3544478,26 Z$M7.41401 6.00012L11.707 1.70721C12.098 1.31622 12.098 0.684236 11.707 0.293244C11.316 -0.097748 10.684 -0.097748 10.293 0.293244L6.00001 4.58615L1.70701 0.293244C1.31601 -0.097748 0.684006 -0.097748 0.293006 0.293244C-0.0979941 0.684236 -0.0979941 1.31622 0.293006 1.70721L4.58601 6.00012L0.293006 10.293C-0.0979941 10.684 -0.0979941 11.316 0.293006 11.707C0.488006 11.902 0.744006 12 1.00001 12C1.25601 12 1.51201 11.902 1.70701 11.707L6.00001 7.4141L10.293 11.707C10.488 11.902 10.744 12 11 12C11.256 12 11.512 11.902 11.707 11.707C12.098 11.316 12.098 10.684 11.707 10.293L7.41401 6.00012ZM5 2c-1.654 0-3 1.346-3 3v14c0 1.654 1.346 3 3 3h14c1.654 0 3-1.346 3-3v-14c0-1.654-1.346-3-3-3h-14zm19 3v14c0 2.761-2.238 5-5 5h-14c-2.762 0-5-2.239-5-5v-14c0-2.761 2.238-5 5-5h14c2.762 0 5 2.239 5 5zM19 0h-14c-2.762 0-5 2.239-5 5v14c0 2.761 2.238 5 5 5h14c2.762 0 5-2.239 5-5v-14c0-2.761-2.238-5-5-5zm-8.959 17l-4.5-4.319 1.395-1.435 3.08 2.937 7.021-7.183 1.422 1.409-8.418 8.591zEndpoints
Called while loading (seen) or named in the code (code).
| shop.spacex.com/apps/locksmith/ping | seenE39 |
| shop.spacex.com/api/unstable/graphql.json | seenE40 |
| shop.spacex.com/.well-known/shopify/monorail/unstable/produce_batch | seenE41 |
| shop.spacex.com/recommendations/products | seenE42 |
| shop.spacex.com/api/collect | seenE43 |
| shop.spacex.com/shopify_pay/accelerated_checkout | seenE44 |
| /shopify_pay/accelerated_checkout | codeE45 |
| /action | codeE46 |
| /resource | codeE47 |
| /ping | codeE48 |
| otlp-http-production.shopifysvc.com/v1/metrics | codeE49 |
| app.minmaxify.com/report | codeE50 |
| /;SameSite=None;Secure; | codeE51 |
| api.obviyo.net/edge | codeE52 |
| /;SameSite=None;Secure | codeE53 |
| /v1/logs | codeE54 |
| /api | codeE55 |
Evidence
Every sentence above points to one of these. Code references show the file, line:column and the short identifier that matched, never the site's code itself.
Limits
- We only see what your browser sees: code and requests on a first visit, without logging in or accepting cookie banners. What the servers do with data is invisible from outside.
- Site code is usually minified (compressed), so names are partly lost and some code may be only partly analysed.
- Some trackers only load after you accept cookies or log in, so the real list can be longer.
- We visited from a server in the United States. Sites load different trackers and cookie banners in different countries (visitors in the EU usually get a consent banner first).
- This text was written from fixed templates because no AI writer was available. It uses exactly the same evidence.
- The code reader hit its size budget on parts of 11 large bundle file(s); those parts weren't fully analysed.
Facts, not judgements: this page describes what the code and traffic show, not anyone's intent. Not financial advice. Case id WF8SYH1S.