Security Analysis Results

private, no-cache, no-store, max-age=0, must-revalidate

gzip

default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: data: https://challenges.cloudflare.com https://*.posthog.com https://posthog.doma.xyz https://posthog-testnet.doma.xyz https://posthog-mainnet.doma.xyz https://static.cloudflareinsights.com https://www.googletagmanager.com https://www.google-analytics.com https://api.hypelab.com https://r2.ixncdn.com; style-src 'self' 'unsafe-inline' https://*.posthog.com https://posthog.doma.xyz https://posthog-testnet.doma.xyz https://posthog-mainnet.doma.xyz https://fonts.googleapis.com; img-src 'self' data: blob: https://*.posthog.com https://posthog.doma.xyz https://posthog-testnet.doma.xyz https://posthog-mainnet.doma.xyz https://ddcdn.sfo3.cdn.digitaloceanspaces.com https://doma.xyz https://opsjet.cloudflareaccess.com https://cdn-devnet.doma.xyz https://cdn-testnet.doma.xyz https://cdn.doma.xyz https://walletconnect.org https://walletconnect.com https://secure.walletconnect.com https://secure.walletconnect.org https://tokens-data.1inch.io https://tokens.1inch.io https://ipfs.io https://cdn.zerion.io https://explorer-api.walletconnect.com https://www.googletagmanager.com https://www.google-analytics.com https://cdn.meld.io https://images-country.meld.io; font-src 'self' data: https://*.posthog.com https://posthog.doma.xyz https://posthog-testnet.doma.xyz https://posthog-mainnet.doma.xyz https://fonts.gstatic.com; media-src 'self' https://*.posthog.com https://posthog.doma.xyz https://posthog-testnet.doma.xyz https://posthog-mainnet.doma.xyz; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; child-src blob: https://auth.privy.io https://verify.walletconnect.com https://verify.walletconnect.org; frame-src 'self' https://d46c9e6b-09c8-4e8d-a5b4-97161086bcf8.bridges.rollbridge.app https://auth.privy.io https://verify.walletconnect.com https://verify.walletconnect.org https://challenges.cloudflare.com https://secure.walletconnect.com https://secure.walletconnect.org https://privy.doma.xyz https://privy.dashboard-dev.doma.xyz/ https://privy.dashboard-testnet.doma.xyz/ https://meldcrypto.com data: blob:; connect-src 'self' https://*.google-analytics.com https://www.google-analytics.com https://cloudflare-ipfs https://arweave.net https://graph.doma.xyz https://nodegraph-mainnet.doma.xyz https://cdn-devnet.doma.xyz https://cdn-testnet.doma.xyz https://cdn.doma.xyz https://*.coingecko.com/ https://*.uniswap.org https://o314338.ingest.us.sentry.io https://o4509077008678912.ingest.us.sentry.io https://auth.privy.io https://privy.doma.xyz https://api.doma.xyz https://*.rpc.privy.systems https://*.posthog.com https://posthog.doma.xyz https://posthog-testnet.doma.xyz https://posthog-mainnet.doma.xyz https://*.conduit.xyz https://*.infura.io https://*.drpc.org https://*.rpc.thirdweb.com wss://relay.walletconnect.com wss://relay.walletconnect.org wss://www.walletlink.org https://rpc.walletconnect.com https://rpc.walletconnect.org https://relay.walletconnect.com https://relay.walletconnect.org https://pulse.walletconnect.com https://pulse.walletconnect.org https://api.web3modal.com https://api.web3modal.org https://keys.walletconnect.com https://keys.walletconnect.org https://notify.walletconnect.com https://notify.walletconnect.org https://echo.walletconnect.com https://echo.walletconnect.org https://push.walletconnect.com https://push.walletconnect.org https://explorer-api.walletconnect.com https://cloudflare-eth.com https://rpc2.sepolia.org https://sepolia.base.org https://mainnet.base.org/ https://mainnet.optimism.io https://arb1.arbitrum.io https://eth.merkle.io https://chain-proxy.wallet.coinbase.com https://rpc-testnet.doma.xyz/ https://rpc.doma.xyz/ wss://rpc-testnet.doma.xyz/ wss://rpc.doma.xyz/ https://rpc-devnet.doma.xyz/ wss://rpc-devnet.doma.xyz/ https://rpc.viction.xyz https://www.shibrpc.com https://rpc.coredao.org https://apechain.calderachain.xyz/http https://api.avax.network/ext/bc/C/rpc https://curtis.rpc.caldera.xyz/http https://puppynet.shibrpc.com https://rpc.ankr.com https://api.devnet.solana.com https://api.mainnet-beta.solana.com wss://api.devnet.solana.com wss://api.mainnet-beta.solana.com https://solana-mainnet.gateway.tatum.io https://solana-rpc.publicnode.com https://mainnet.helius-rpc.com https://wileen-ytgdn6-fast-mainnet.helius-rpc.com https://solana.drpc.org wss://solana-rpc.publicnode.com wss://mainnet.helius-rpc.com wss://wileen-ytgdn6-fast-mainnet.helius-rpc.com https://cloudflare-dns.com https://dnssec-oracle.ens.domains/ https://stargate.finance https://pqzyj9pnj7.execute-api.us-west-1.amazonaws.com https://8h73yks5x6.execute-api.us-east-2.amazonaws.com https://bsc-dataseed.binance.org https://api.relay.link https://api.testnets.relay.link https://api.gaianet.ai https://api.hypelab.com https://r2.ixncdn.com https://api.country.is https://keetmans.omadhina.co.na/ https://restwhois.ngtld.cn/ https://rdap.verisign.com https://data.iana.org https://pubapi.registry.google/ https://rdap.identitydigital.services/ https://rdap.centralnic.com/; worker-src 'self' blob:; manifest-src 'self'

text/html; charset=utf-8

Sun, 03 May 2026 01:29:33 GMT

</_next/static/media/AktivGroteskVF_WghtWdth-s.p.341e9d53.ttf>; rel=preload; as="font"; crossorigin=""; type="font/ttf", </images/doma-logo-privy.svg>; rel=preload; as="image", </_next/static/chunks/398daa4f4dec7878.css>; rel=preload; as="style", </_next/static/chunks/d2e939d5cf964114.css>; rel=preload; as="style"

strict-origin-when-cross-origin

chunked

rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding

1.1 Caddy

nosniff

on

SAMEORIGIN

/domain-lander/nhavan.cyou

1; mode=block