I agree, however you can reduce fraud load by rate limiting IPs for a start. I'm not sure if shop.oculus.com uses the same infrastructure as www.oculus.com (I'm

I agree, however you can reduce fraud load by rate limiting IPs for a start. I'm not sure if shop.oculus.com uses the same infrastructure as www.oculus.com (I'm assuming not). But if it did, caching www would help as well.