e-commerce

English

_ga_HMZN98X6MF

PHPSESSID

__hssrc

hubspotutk

__hstc

cart_id

store_code

private_content_version

__hssc

currency_code

The domain 'westone.com' uses the commercial generic top-level domain (.com). The core label 'westone' covers 7 characters with three vowels and four consonants. Breaking it apart gives two words: west, one. Expect 3.5 characters per word on average. No strong language cues emerged from the frequency lists.

html/07/43/07439c5f-c19d-46af-8eb2-d9a602ec22c3.html.gz

script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:171:0

script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:139:0

frame-ancestors 'self'; report-uri https://send.hsbrowserreports.com/csp/report?resource=collected-forms-embed-js/static-1.4512/bundles/project.js&cfRay=9dc2e5866b56a6a2-FRA

8f5e935c5fc2be80cbe963e391d09e2ccda57f6bdf4a8954dd08036a42702dcc

231e96c152c107d524ee2fc737a30d03baa291c44680ae260ced0febb665eee2

08627e776ca68677e3ea7f3c655194be08966ef119b6497dfea76721b9c430c2

b6382e994ef125d7cff8994dc02bec70ada5e6230988948ec395a31124b56581

e34e3458fefea4b51ee48851f8d69b6e0d4991b6c400b5ecdbe6c55d62218ca7

9b1510435386cbae1697021e30b3bbac30102c29ee4e7d7767420e708423ac7a

4ec78c50b96b45dae16c2e597add847b06b43b2af7ffa3d133975ba5c5cdad16

2fd1eb244e23a9f09b7e876829f8d348df4133d2e12016bac658d8cad6ebc81d

e50442819038f6f5131cc5c96a86463748d817b39e6e8aaef279109bb982b0b1

99fb1834c8896984d90b0c4b4e08e6edef6a47776887c50be132f92c83befd42

0bd5a7d0f2ccb5925548e51da7e1a256b406ef393f12d5abfcd78aab1a25bc7a

e1fbd1d5a36faffed9c58d103cf138428476966dc41219ffec6fb73f68f3b29d

0a8819c4aa27dccda2e1274817df43303cf56c4bd9d843c2a6a993467ba65dd7

461787884aa00f56e3e6b4f79d2c17fd8119e52110d0c5939e07242f90d7f75d

7677a2c291cdf4439f8e032fe10253d53034b0a623b4fa25c162387d194fa442

4a859ac8e77341f22a48a84c0840ba71c043ce10a7296f132c9630147b7d4c86

1b95b6c9f9ab8c7696d4a2c855d01ac46c0bceeae92206334de99a27292b01ab

4eac4e547b2245f1df48ec42166f371e5ecc096c1cd5138c10cbea683220922b

ffc3b07e0de02dd7c41a2c93c34dda60afffe3e3277f7776482e1d0abd8a443a

1a1259372dc7fd664b346e1b0cf0f75e27f4ac635abbf00a70fa887a86e99121

656f8824b937d056bddc8d7ed5aacecbcf270b4c1b454820fa8fd25b830202b5

0e4feac924806b764399f55ab46f1087246110079aeaaafc3899cf89a264e4ac

0bc9d8ba53769925006c7fc3c3d8c85c434947947ad08de80d58258ea09a67b1

f49a04b00ff0f88e985cf14981a840d3e52874cc97831a70ea7defc89eab5435

22ee759a76d07e4ccc9cbdb4cb76c35d5f5433afbef608441eec25e058a8e566

3249b3a1d494238067b8e216192fdb8f46d84dfe92ab5ef041f9d2e4b66f4c1a

764e33a41688542bf3a9ad15cef1cd635c87b9f2975006d9b5cdc643e2c81aa2

483c7de50148f0cab96726961af3268ec2eb2f9ff93591b1dc06444bbb52a881

9ddd8f8d255eb08765d30e08ac0635f6b3e55efddf680fde41bb6cd202b5b5af

9e6089ef9eda7faa24bff4f79455f8352ebb7f81a21287e62a43d68139030575

eade30e6fcb6d8747adcfa81f2f86ee81ef5bf993a5da83bdaabd85bbcde0d16

6ee727f2945ecbf3d33f11801c2b87fd0947ddd86bfe58be7283345f0a58c18e

e21399f501980a9f785b886070715564c908a06c5c09fc3c042b068bcdc39c92

97dc5338b3369e66f0b8e0019663ecf6e0fbc218f75f765aa79e00fc86400ca3

12c785587aa80e80d15a82cd8d7e6ae63d7be7b19d066a824396705d77616354

83082ba1f76ae528a21276db03e30d1912879b717a1dfcd00a0a600feead98d7

096943c1b082f9cddcc938c460e49efc82b2e9b7bab904f48e6471ed951fbf7c

49bfbffc26df79e9004f59e0868ea2c8615e5693bbb5ef1e4b8ec53304e3c281

31dd1534c4da5512a8c6c7e541587c22a0f58d822f57f407e065a813f7bf3717

80da7241fa4147037c4810fb93a18e2e01c1136c2e6d8af04b017fad0daef82a

fadf4dd63cdab6b5852ca1b586ae4021ad261220b3af05ef609f87f5cd2eadb1

6216d51653f6d043fc11610c9082319695455045ebecacddf8e8224070242693

20ffe4f6b046a146033a6801e06db24495af8be97147e4990edbca272226bdcd

5cb8e2c686e44e5b6a1daa6e4ed6e2e232121dfbf893e4a7b0fce6e4d33e7067

d5aab3d660b17b88561f91b9532865bcce9c0dc790608a9319a636fb986e4739

78c10480f25e0076565fbc1eddd37273606ca94488d0c68438a827e06ace1ba7

82f5c36675c93e7522fd533596e99e52359a446e0b6c08e1f929234554905ec3

11494014b862c3e409ecd790becf0c576bcab27ed3d47f0602e72063109964d1

22f39585e88ffed6ab3ab24cc945c14bc349dc607c354592be3f9c672d9b3001

4a7a3b3b179c3023fc1f860bdde34b972d1b1cb94ea28a2113267b42ba701e41

437d0a888da18e9f112af610bef0ea8776363be9693497a7f8b4b16adf4affd6

3a7684de795011e58350a07468a6af365360135daa4130dcb6d979a2b54c8c25

f0c17958ea24a22aea7f98c3396b33c2f9076178152393f7cce86f910d1811a6

3ce9a71eee726ab8c677ed9907d8b871bd15eb0f9cabaa963620d817621de529

945af3d258ce23ddf5fafcd1654393dd3166e7054986109e2ab54cb102a785c9

800671e08a3bd2cee47590e078b0229ec75ea8791afc22f8ef0e4d3a55830464

58b9a5c5f0939cc9063c82c83edd9e3573386cc1b0bfc56cf3d81db426408a07

177b212c66f263a52935b3b9ad18dd4dbcb22d6ac638b1c41818b5954dc24d5b

48027e85694c80fe3f52d1b39bff780ec29ac9f5ce763884d6bf8fb51530e990

1ffe24f145b65360d334f06476f24e7a6a90e0ba0a3707bbaa80f25818e1b797

50a5c9485a4f038076090d74b4181313fc9b610f3b1295c94434da0f4aa5afae

dbefa78da2b173313570ac1973b6b321de22533f5a98d17e73a7be8e5a3429ba

0e55cc29e0469b4e57969adaf404af7c88b7114afba5e65b89ab2acc2e5e1060

3f40e1918922125c85ad5632ae32a64e8e85fb836dc1ea367c0bc1d1dc455a0e

02c521b2a3ea72728c4b135f775e224b69f0eaa0bc9f06c3377bb8107d803987

2c0df3d8d47583754ecd20c3dcb123465ea4853071f96ec590a655e8ee85c3c3

Next.js Allows a Denial of Service (DoS) with Server Actions

Next.js Race Condition to Cache Poisoning

Authorization Bypass in Next.js Middleware

Information exposure in Next.js dev server due to lack of origin verification

A vulnerability in Next.js Image Optimization has been fixed in v15.4.5 and v14.2.31. When images returned from API routes vary based on request headers (such as `Cookie` or `Authorization`), these responses could be incorrectly cached and served to unauthorized users due to a cache key confusion bug.

All users are encouraged to upgrade if they use API routes to serve images that depend on request headers and have image optimization enabled.

More details at [Vercel Changelog](https://vercel.com/changelog/cve-2025-57752)

A vulnerability in **Next.js Image Optimization** has been fixed in **v15.4.5** and **v14.2.31**. The issue allowed attacker-controlled external image sources to trigger file downloads with arbitrary content and filenames under specific configurations. This behavior could be abused for phishing or malicious file delivery.

All users relying on `images.domains` or `images.remotePatterns` are encouraged to upgrade and verify that external image sources are strictly validated.

More details at [Vercel Changelog](https://vercel.com/changelog/cve-2025-55173)

A vulnerability in **Next.js Middleware** has been fixed in **v14.2.32** and **v15.4.7**. The issue occurred when request headers were directly passed into `NextResponse.next()`. In self-hosted applications, this could allow Server-Side Request Forgery (SSRF) if certain sensitive headers from the incoming request were reflected back into the response.

All users implementing custom middleware logic in self-hosted environments are strongly encouraged to upgrade and verify correct usage of the `next()` function.

More details at [Vercel Changelog](https://vercel.com/changelog/cve-2025-57822)

A vulnerability affects certain React packages for versions 19.0.0, 19.0.1, 19.1.0, 19.1.1, 19.1.2, 19.2.0, and 19.2.1 and frameworks that use the affected packages, including Next.js 15.x and 16.x using the App Router. The issue is tracked upstream as [CVE-2025-55184](https://www.cve.org/CVERecord?id=CVE-2025-55184).

A malicious HTTP request can be crafted and sent to any App Router endpoint that, when deserialized, can cause the server process to hang and consume CPU. This can result in denial of service in unpatched environments.

It was found that the fix addressing [CVE-2025-55184](https://github.com/advisories/GHSA-2m3v-v2m8-q956) in React Server Components was incomplete and did not fully prevent denial-of-service attacks in all payload types. This affects React package versions 19.0.2, 19.1.3, and 19.2.2 and frameworks that use the affected packages, including Next.js 13.x, 14.x, 15.x and 16.x using the App Router. The issue is tracked upstream as [CVE-2025-67779](https://www.cve.org/CVERecord?id=CVE-2025-67779).

A malicious HTTP request can be crafted and sent to any Server Function endpoint that, when deserialized, can enter an infinite loop within the React Server Components runtime. This can cause the server process to hang and consume CPU, resulting in denial of service in unpatched environments.

0e533581a271ff92a56e5b2992c1c627ca87c3d90a6e0d6f5735499edbd7c635

9df5c194110b00ac66ed62b98b899d176da89200e9b453d6a708a52c124353b3

15e6f115c93207a18b10aa6395448ad0cf4dacf7348b74b5b6d45c9494c52321

fb9f5363fd9dcb1e5e0e5471f33d4c5f62ef001c9a3ae92eae96b2ac2332631d

83d6868572c93194a04196781b45528f873ad131a1f994f20bace2c7f7fec17d

robots

width=device-width, initial-scale=1, minimum-scale=1, maximum-scale=1, shrink-to-fit=no, user-scalable=no, viewport-fit=cover

viewport

https://westone.com/images/icons/icon-384x384.png

OlpEbcgrU8NFFInexIlgC2YNBFx4p8Wn-kIfD8CMXWc

google-site-verification

Westone Laboratories Hearing Healthcare Earmolds Audiology Supplies Military Hearing Protection

keyword

Westone Laboratories provides hearing healthcare products like earmolds, hearing protection, and supplies for audiology practices and also serves the military with hearing protection and communications equipment. 

description

title

next-head-count

application-name

apple-mobile-web-app-capable

apple-mobile-web-app-status-bar-style

apple-mobile-web-app-title

format-detection

mobile-web-app-capable

msapplication-config

msapplication-TileColor

msapplication-tap-highlight

theme-color

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs

html/07/43/07439c5f-c19d-46af-8eb2-d9a602ec22c3_nodriver.html.gz

Westone

Network Solutions, LLC

WESTONE.COM

Site Operations

New Relic

NR-NET-CHI

{"props":{"asPath":"/","splashCache":"","pageProps":{"cmsPage":{"meta_description":"Westone Laboratories provides hearing healthcare products like earmolds, hearing protection, and supplies for audiol


             (function(w,d,s,l,i){w[l]=w[l]||[];w[l].push({'gtm.start':
             new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],
             j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src=
             'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f);
             })(window,document,'script','dataLayer', 'GTM-MSHJ4RM');
           

Requests	IP Address	Location	AS Autonomous System
11	104.18.40.240	United States	AS13335Cloudflare, Inc.
10	104.16.6.65	United States	AS13335Cloudflare, Inc.
10	162.247.243.39	United States	AS54113Fastly, Inc.
10	104.16.160.168	United States	Unknown
10	104.16.108.254	United States	Unknown
10	142.251.152.119	United States	Unknown
10	151.101.129.124	United States	AS54113Fastly, Inc.
10	142.251.140.163	United States	Unknown
10	172.217.16.200	United States	AS15169Google LLC
10	104.16.137.209	United States	Unknown
101	10	-	-

Security Scan Report: westone.com

Summary

AI Security Verdict

Safe Website

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History