Technical Information
| HTTP Status Code | 200 |
| HTTP Version | HTTP/1.1 |
| HTTPS | ✔ Available |
| IP Address | 170.189.192.186 |
| Server Software | cloudflare |
| CDN | Cloudflare |
| Compression | gzip |
|
🔒 🟡 Mixed Content (1 HTTP resources) | The page is served over HTTPS but loads 1 resource(s) over HTTP. This may be blocked in modern browsers. |
|
ℹ 🔵 Missing X-Frame-Options | The site can be embedded in iframes by third parties (clickjacking risk). |
HTTP Status Code 200
HTTP Version HTTP/1.1
HTTPS ✔ Available
IP Address 170.189.192.186
Server Software cloudflare
CDN Cloudflare
Compression gzip
🔒 🟡 Mixed Content (1 HTTP resources) The page is served over HTTPS but loads 1 resource(s) over HTTP. This may be blocked in modern browsers.
ℹ 🔵 Missing X-Frame-Options The site can be embedded in iframes by third parties (clickjacking risk).
Redirect Chain
| # | URL | HTTP Status Code | Status |
| 1 | https://oxy.com:443 | 302 | HTTP/1.0 302 Moved Temporarily |
| 2 | https://www.oxy.com | 200 | HTTP/2 200 |
#1 URL https://oxy.com:443
HTTP Status Code 302
Status HTTP/1.0 302 Moved Temporarily
#2 URL https://www.oxy.com
HTTP Status Code 200
Status HTTP/2 200
Performance
| DNS Lookup | 13.5 ms |
| TCP Connect | 15.5 ms |
| TLS Handshake | 8.6 ms |
| Time To First Byte (TTFB) | 237.9 ms |
| Content Download | 42.5 ms |
| Total Response Time | 280.4 ms |
DNS Lookup 13.5 ms
TCP Connect 15.5 ms
TLS Handshake 8.6 ms
Time To First Byte (TTFB) 237.9 ms
Content Download 42.5 ms
Total Response Time 280.4 ms
Security
| HTTPS | ✔ Enabled |
| HSTS | ✔ max-age=31536000; includeSubDomains; preload |
| CSP | ✔ Configured |
| X-Frame-Options | ⚠ Not configured |
| X-Content-Type-Options | ✔ nosniff |
| Referrer Policy | no-referrer-when-downgrade |
| Permissions Policy | ✔ Configured |
| HTTP/2 | ⚠ HTTP/1.1 |
HTTPS ✔ Enabled
HSTS ✔ max-age=31536000; includeSubDomains; preload
CSP ✔ Configured
X-Frame-Options ⚠ Not configured
X-Content-Type-Options ✔ nosniff
Referrer Policy no-referrer-when-downgrade
Permissions Policy ✔ Configured
HTTP/2 ⚠ HTTP/1.1
SEO Quick Check
| Title | Oxy | Zero In |
| Meta Description | We are a best-in-class, low-cost operator with assets in the United States, Middle East, Africa and Latin America, applying technology to drive operational excellence and leveraging our global leadership in carbon management to advance our business. |
| Open Graph Title | Oxy | Zero In |
| Open Graph Description | Applying technology to drive operational excellence and leveraging our global leadership in carbon management to advance our business |
| Twitter Card | summary |
| Twitter Title | Oxy | Zero In |
| Twitter Description | Applying technology to drive operational excellence and leveraging our global leadership in carbon management to advance our business |
Title Oxy | Zero In
Meta Description We are a best-in-class, low-cost operator with assets in the United States, Middle East, Africa and Latin America, applying technology to drive operational excellence and leveraging our global leadership in carbon management to advance our business.
Open Graph Title Oxy | Zero In
Open Graph Description Applying technology to drive operational excellence and leveraging our global leadership in carbon management to advance our business
Twitter Card summary
Twitter Title Oxy | Zero In
Twitter Description Applying technology to drive operational excellence and leveraging our global leadership in carbon management to advance our business
Detected Technologies
| Technology | jQuery Google Analytics Google Tag Manager Cloudflare PHP |
Technology jQuery Google Analytics Google Tag Manager Cloudflare PHP
HTTP Headers
| Date
| Thu, 27 Aug 2026 01:49:46 GMT |
| Content-type
| text/html; charset=utf-8 |
| Server
| cloudflare |
| Access-control-allow-origin
| https://www.oxy.com |
| Cache-control
| no-cache,no-store |
| Expires
| -1 |
| Pragma
| no-cache |
| Set-cookie
| ARRAffinitySameSite=4f52e739ba8e0ac395f519ce662e99780eb92da16964499e83a36209d4742c63;Path=/;HttpOnly;SameSite=None;Secure;Domain=www.oxy.com |
| Vary
| Origin |
| Strict-transport-security
| max-age=31536000; includeSubDomains; preload |
| Request-context
| appId=cid-v1:6f53d847-e1af-4d5a-822a-832c0d6d884a |
| Content-security-policy
| default-src 'self' *.episerver.net *.jquery.com *.google-analytics.com *.doubleclick.net *.googleapis.com *.gstatic.com *.google.com player.vimeo.com assets.oxychem.com; frame-ancestors 'self' https://occidentalpetroleum.gcs-web.com/ *.oxy.com https://oxyinc.sharepoint.com/ https://forms.office.com/; script-src 'self' *.youtube.com/ https://js.monitor.azure.com *.cookielaw.org *.clarity.ms *.aptrinsic.com api.campaign.episerver.net www.google-analytics.com *.google.com *.gstatic.com ajax.googleapis.com cdnjs.cloudflare.com *.googletagmanager.com dl.episerver.net *.vo.msecnd.net dc.services.visualstudio.com code.jquery.com maxcdn.bootstrapcdn.com cdn.jsdelivr.net ecwportal.vertexsmb.com/ 'unsafe-inline' 'unsafe-eval' *.adroll.com *.cloudfront.net *.flippingbook.com connect.facebook.net; connect-src 'self' *.cookielaw.org https://geolocation.onetrust.com *.clarity.ms *.aptrinsic.com api.campaign.episerver.net pui.episerver.net *.doubleclick.net dc.services.visualstudio.com www.google-analytics.com auth.vertexsmb.com/ *.flippingbook.com connect.facebook.net js.monitor.azure.com https://*.google.com https://www.gstatic.com *.onetrust.com *.onetrust.io; img-src blob: 'self' *.w3.org *.clarity.ms *.cookielaw.org *.imgix.net *.bing.com *.googletagmanager.com *.google-analytics.com *.adroll.com x.bidswitch.net ml314.com pixel.tapad.com idsync.rlcdn.com dsum-sec.casalemedia.com pixel.rubiconproject.com us-u.openx.net sync.outbrain.com image2.pubmatic.com sync.taboola.com *.adnxs.com eb2.3lift.com match.adsrvr.org segments.company-target.com *.reson8.com i.liadm.com dpm.demdex.net *.flippingbook.com *.cloudfront.net www.facebook.com https://assets.oxychem.com; media-src 'self' blob: https://assets.oxychem.com; style-src 'self' 'unsafe-inline' www.google-analytics.com *.aptrinsic.com ajax.googleapis.com cdnjs.cloudflare.com *.soundcloud.com *.googletagmanager.com dl.episerver.net *.googleapis.com maxcdn.bootstrapcdn.com cdn.jsdelivr.net; base-uri 'self'; font-src 'self' https://fonts.gstatic.com *.cloudfront.net; form-action 'self'; frame-src 'self' *.episerver.net https://cacl2-tools-dev.oxy.com *.youtube.com/ https://occidentalpetroleum.gcs-web.com/ https://sds.oxy.com/ player.vimeo.com https://www.google.com/ *.jaxondigital.com ecwportal.vertexsmb.com/ https://free.timeanddate.com/ *.adroll.com *.flippingbook.com *.optimizely.com https://forms.office.com/; report-to main; report-uri https://reportto.oxy.com/reportto.php |
| Reporting-endpoints
| main="https://reportto.oxy.com/reportto.php" |
| X-content-type-options
| nosniff |
| X-frame-option
| sameorigin |
| Referrer-policy
| no-referrer-when-downgrade |
| Permissions-policy
| accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=() |
| Cf-cache-status
| DYNAMIC |
| Content-encoding
| gzip |
| Cf-ray
| a3176becdd9ed3af-CDG |
| Alt-svc
| h3=":443"; ma=86400 |
Meta Tags
| Viewport | width=device-width, initial-scale=1.0 user-scalable=yes |
| X-UA-Compatible | IE=edge |
| Description | We are a best-in-class, low-cost operator with assets in the United States, Middle East, Africa and Latin America, applying technology to drive operational excellence and leveraging our global leadership in carbon management to advance our business. |
| Clarity-site-verification | e1d46fed-16f4-450e-a4d5-8fc155b45be4 |
Date Thu, 27 Aug 2026 01:49:46 GMT
Content-type text/html; charset=utf-8
Server cloudflare
Access-control-allow-origin https://www.oxy.com
Cache-control no-cache,no-store
Expires -1
Pragma no-cache
Set-cookie ARRAffinitySameSite=4f52e739ba8e0ac395f519ce662e99780eb92da16964499e83a36209d4742c63;Path=/;HttpOnly;SameSite=None;Secure;Domain=www.oxy.com
Vary Origin
Strict-transport-security max-age=31536000; includeSubDomains; preload
Request-context appId=cid-v1:6f53d847-e1af-4d5a-822a-832c0d6d884a
Content-security-policy default-src 'self' *.episerver.net *.jquery.com *.google-analytics.com *.doubleclick.net *.googleapis.com *.gstatic.com *.google.com player.vimeo.com assets.oxychem.com; frame-ancestors 'self' https://occidentalpetroleum.gcs-web.com/ *.oxy.com https://oxyinc.sharepoint.com/ https://forms.office.com/; script-src 'self' *.youtube.com/ https://js.monitor.azure.com *.cookielaw.org *.clarity.ms *.aptrinsic.com api.campaign.episerver.net www.google-analytics.com *.google.com *.gstatic.com ajax.googleapis.com cdnjs.cloudflare.com *.googletagmanager.com dl.episerver.net *.vo.msecnd.net dc.services.visualstudio.com code.jquery.com maxcdn.bootstrapcdn.com cdn.jsdelivr.net ecwportal.vertexsmb.com/ 'unsafe-inline' 'unsafe-eval' *.adroll.com *.cloudfront.net *.flippingbook.com connect.facebook.net; connect-src 'self' *.cookielaw.org https://geolocation.onetrust.com *.clarity.ms *.aptrinsic.com api.campaign.episerver.net pui.episerver.net *.doubleclick.net dc.services.visualstudio.com www.google-analytics.com auth.vertexsmb.com/ *.flippingbook.com connect.facebook.net js.monitor.azure.com https://*.google.com https://www.gstatic.com *.onetrust.com *.onetrust.io; img-src blob: 'self' *.w3.org *.clarity.ms *.cookielaw.org *.imgix.net *.bing.com *.googletagmanager.com *.google-analytics.com *.adroll.com x.bidswitch.net ml314.com pixel.tapad.com idsync.rlcdn.com dsum-sec.casalemedia.com pixel.rubiconproject.com us-u.openx.net sync.outbrain.com image2.pubmatic.com sync.taboola.com *.adnxs.com eb2.3lift.com match.adsrvr.org segments.company-target.com *.reson8.com i.liadm.com dpm.demdex.net *.flippingbook.com *.cloudfront.net www.facebook.com https://assets.oxychem.com; media-src 'self' blob: https://assets.oxychem.com; style-src 'self' 'unsafe-inline' www.google-analytics.com *.aptrinsic.com ajax.googleapis.com cdnjs.cloudflare.com *.soundcloud.com *.googletagmanager.com dl.episerver.net *.googleapis.com maxcdn.bootstrapcdn.com cdn.jsdelivr.net; base-uri 'self'; font-src 'self' https://fonts.gstatic.com *.cloudfront.net; form-action 'self'; frame-src 'self' *.episerver.net https://cacl2-tools-dev.oxy.com *.youtube.com/ https://occidentalpetroleum.gcs-web.com/ https://sds.oxy.com/ player.vimeo.com https://www.google.com/ *.jaxondigital.com ecwportal.vertexsmb.com/ https://free.timeanddate.com/ *.adroll.com *.flippingbook.com *.optimizely.com https://forms.office.com/; report-to main; report-uri https://reportto.oxy.com/reportto.php
Reporting-endpoints main="https://reportto.oxy.com/reportto.php"
X-content-type-options nosniff
X-frame-option sameorigin
Referrer-policy no-referrer-when-downgrade
Permissions-policy accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()
Cf-cache-status DYNAMIC
Content-encoding gzip
Cf-ray a3176becdd9ed3af-CDG
Alt-svc h3=":443"; ma=86400
