other

e-commerce

English

locale

The domain 'www.oculus.com' uses the commercial generic top-level domain (.com) and includes subdomain 'www'. Count 6 characters in 'oculus' split between three vowels and three consonants. Splitting it apart reveals 1 word: oculus. No strong language cues emerged from the frequency lists.

html/83/f1/83f121bd-1f0e-446d-ada0-6e0357560d5a.html.gz

default-src 'self';script-src 'self' 'nonce-tMxAkbKk' *.fbcdn.net *.oculus.com www.meta.com/3ds2/ddc/ www.meta.com/3ds2/challenge_complete/ 'wasm-unsafe-eval' gw.conversionsapigateway.com;style-src 'self' 'unsafe-inline' data: *.fbcdn.net 'unsafe-eval' *.oculus.com www.meta.com/3ds2/ddc/ www.meta.com/3ds2/challenge_complete/;connect-src blob: *.fbcdn.net www.meta.com *.www.meta.com *.facebook.com/tr/ *.facebook.com/tr *.facebook.com/parallel-pxl/ *.facebook.com/parallel-pxl secure.facebook.com/payments/generate_token *.oculus.com www.meta.com/3ds2/ddc/ www.meta.com/3ds2/challenge_complete/ gw.conversionsapigateway.com;font-src data: *.fbcdn.net *.oculus.com www.meta.com/3ds2/ddc/ www.meta.com/3ds2/challenge_complete/;img-src 'self' blob: data: *.fbcdn.net *.fbsbx.com *.oculuscdn.com *.facebook.com/tr/ *.facebook.com/tr *.facebook.com/parallel-pxl/ *.facebook.com/parallel-pxl *.cdninstagram.com *.oculus.com www.meta.com/3ds2/ddc/ www.meta.com/3ds2/challenge_complete/ gw.conversionsapigateway.com;media-src blob: data: lookaside.fbsbx.com *.fbcdn.net *.cdninstagram.com *.oculuscdn.com;child-src blob: data: *.fbcdn.net;frame-src data: *.fbcdn.net *.facebook.com/tr/ *.facebook.com/tr *.facebook.com/parallel-pxl/ *.facebook.com/parallel-pxl www.facebook.com/plugins/wearables_social_context www.meta.com/common/ *.www.meta.com/common/ *.fbsbx.com/ www.meta.com/tealium/ *.www.meta.com/tealium/ www.meta.com/payments/ *.www.meta.com/payments/ *.fbthirdpartypixel.com *.oculus.com www.meta.com/3ds2/ddc/ www.meta.com/3ds2/challenge_complete/ centinelapi.cardinalcommerce.com centinelapistag.cardinalcommerce.com client.cardinaltrusted.com cas.client.cardinaltrusted.com gw.conversionsapigateway.com;manifest-src 'self' data:;object-src 'self' data:;worker-src blob: data: *.fbcdn.net;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;

default-src 'self';script-src 'self' 'nonce-Cq9HVwwp' *.fbcdn.net *.oculus.com www.meta.com/3ds2/ddc/ www.meta.com/3ds2/challenge_complete/ 'wasm-unsafe-eval' gw.conversionsapigateway.com;style-src 'self' 'unsafe-inline' data: *.fbcdn.net 'unsafe-eval' *.oculus.com www.meta.com/3ds2/ddc/ www.meta.com/3ds2/challenge_complete/;connect-src blob: *.fbcdn.net www.meta.com *.www.meta.com *.facebook.com/tr/ *.facebook.com/tr *.facebook.com/parallel-pxl/ *.facebook.com/parallel-pxl secure.facebook.com/payments/generate_token *.oculus.com www.meta.com/3ds2/ddc/ www.meta.com/3ds2/challenge_complete/ gw.conversionsapigateway.com;font-src data: *.fbcdn.net *.oculus.com www.meta.com/3ds2/ddc/ www.meta.com/3ds2/challenge_complete/;img-src 'self' blob: data: *.fbcdn.net *.fbsbx.com *.oculuscdn.com *.facebook.com/tr/ *.facebook.com/tr *.facebook.com/parallel-pxl/ *.facebook.com/parallel-pxl *.cdninstagram.com *.oculus.com www.meta.com/3ds2/ddc/ www.meta.com/3ds2/challenge_complete/ gw.conversionsapigateway.com;media-src blob: data: lookaside.fbsbx.com *.fbcdn.net *.cdninstagram.com *.oculuscdn.com;child-src blob: data: *.fbcdn.net;frame-src data: *.fbcdn.net *.facebook.com/tr/ *.facebook.com/tr *.facebook.com/parallel-pxl/ *.facebook.com/parallel-pxl www.facebook.com/plugins/wearables_social_context www.meta.com/common/ *.www.meta.com/common/ *.fbsbx.com/ www.meta.com/tealium/ *.www.meta.com/tealium/ www.meta.com/payments/ *.www.meta.com/payments/ *.fbthirdpartypixel.com *.oculus.com www.meta.com/3ds2/ddc/ www.meta.com/3ds2/challenge_complete/ centinelapi.cardinalcommerce.com centinelapistag.cardinalcommerce.com client.cardinaltrusted.com cas.client.cardinaltrusted.com gw.conversionsapigateway.com;manifest-src 'self' data:;object-src 'self' data:;worker-src blob: data: *.fbcdn.net;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;

default-src blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net;script-src *.facebook.com *.fbcdn.net 127.0.0.1:* 'nonce-Vb5HH33s' blob: 'self' 'wasm-unsafe-eval';style-src *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: *.whatsapp.net *.fb.com *.oculuscdn.com https://trustly.one/ https://*.trustly.one/ https://paywithmybank.com/ https://*.paywithmybank.com/;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com data:;child-src data: blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net;frame-src *.facebook.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net accounts.meta.com *.accounts.meta.com https://trustly.one/ https://*.trustly.one/ https://paywithmybank.com/ https://*.paywithmybank.com/;manifest-src data: blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net;object-src data: blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;

multipart/form-data; boundary=----WebKitFormBoundary6AtCWDj5OHKr6dCZ

multipart/form-data; boundary=----WebKitFormBoundary2NZIkscG0EdjNTdY

multipart/form-data; boundary=----WebKitFormBoundaryTsdAFU7f5CmRdBo1

cf4012855810edd80ff5404202e855e5c57f735d55131472105b51987d81cd35

40f239abc305dd94e3621bf44ce49e42ad2c6c35bcde86cca2d5e654e06b3fd3

38e715ae203f4c9a747d835b5d957521615be8bc0d377894f8ef4afc83755e64

739dcc9a685044ed690bd93f236d44e8fad9337ee9775310b3738c3b3fd6bdaf

5b06dbd6fcb0de5172a201e5a12071e89b501f1dd2028d33bf855795f564b144

b029cc9ef58e91e196ad7093d29f8d095b21be57aa5a9d563c16b79ced2e80d3

e9f5d0b3addec50a5515bdcca50c4d17dc3a66dab6fecae3c7115cc6581c20c1

d2a2b78db748bc544fa8262cc0cb946544ac1c9416c3399ba55de103e57c4f48

5e341feb18fbad598d0773dc69c581ccdde5acd92a7c0cea9183865863117d95

576337ce46d6d12b7c36e15c01cb915ea44aa25ea085e9440a6332bee57aec89

692fbe7cf3998a8015660a089c065c4c5e4419e95417074ea1249def51b35c82

0fd45746488f682e2c382ff4af8e6e56bfa7671edb5f4011ec5b04d5aff9d17f

61b0e10fd02cbd35084486bb0f6de434abbe82e28bfc8334ff71ec80f7d73cff

bingbot

width=device-width,initial-scale=1,maximum-scale=2,shrink-to-fit=no

viewport

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

{"require":[["qplTimingsServerJS",null,null,["7580163876923114326","htmlStart"]]]}

{"require":[["maybeDisableAnimations",null,null,[]]]}

{"require":[["replaceNativeTimer",null,null,[]]]}

{"require":[["bootstrapWebSession",null,null,[1764894434]]]}

{"require":[["qplTimingsServerJS",null,null,["7580163876923114326","tierOne"]]]}

{"require":[["JSScheduler","makeSchedulerGlobalEntry",null,["null",false,false]]]}

{"require":[["qplTimingsServerJS",null,null,["7580163876923114326","tierOneEnd"]]]}

{"require":[["qplTimingsServerJS",null,null,["7580163876923114326","tierTwo"]]]}

{"require":[["qplTimingsServerJS",null,null,["7580163876923114326","tierTwoEnd"]]]}

{"require":[["qplTimingsServerJS",null,null,["7580163876923114326","tierThree"]]]}

{"require":[["qplTimingsServerJS",null,null,["7580163876923114326","tierThreeEnd"]]]}

Requests	IP Address	Location	AS Autonomous System
25	157.240.0.6	Frankfurt am Main, Hesse, Germany	AS32934FACEBOOK
5	157.240.0.13	Frankfurt am Main, Hesse, Germany	AS32934FACEBOOK
4	2a03:2880:f177:185:face:b00c:0:25de	Frankfurt am Main, Hesse, Germany	AS32934FACEBOOK
4	2a03:2880:f277:1d0:face:b00c:0:32c2	Frankfurt am Main, Hesse, Germany	AS32934FACEBOOK
4	2a03:2880:f084:105:face:b00c:0:3	Frankfurt am Main, Hesse, Germany	AS32934FACEBOOK
4	2a03:2880:f084:10d:face:b00c:0:2	Frankfurt am Main, Hesse, Germany	AS32934FACEBOOK
1	157.240.0.35	Frankfurt am Main, Hesse, Germany	AS32934FACEBOOK
1	157.240.0.128	Frankfurt am Main, Hesse, Germany	AS32934FACEBOOK
33	8	-	-

Security Scan Report: www.oculus.com

Summary

AI Security Verdict

Safe Website

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies1

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History