{
  "generated_at": "2026-05-13T09:13:08-06:00",
  "romp_version": "1.3.1",
  "scans": [
{
  "target": "jandgstudios.fun",
  "ts": "2026-05-13T09:13:08-06:00",
  "recon": {
    "dns": {
      "target": "jandgstudios.fun",
      "requestedType": "ALL",
      "raw": ";; A records\n38.15.59.248\n\n;; AAAA records\n(none)\n\n;; MX records\n10 mx.domainless.fun.\n\n;; NS records\nns39.domaincontrol.com.\nns40.domaincontrol.com.\n\n;; TXT records\n\"v=spf1 a:mail.domainless.fun -all\"",
      "records": [
        {
          "type": "A",
          "records": [
            "38.15.59.248"
          ]
        },
        {
          "type": "AAAA",
          "records": []
        },
        {
          "type": "MX",
          "records": [
            "10 mx.domainless.fun."
          ]
        },
        {
          "type": "NS",
          "records": [
            "ns39.domaincontrol.com.",
            "ns40.domaincontrol.com."
          ]
        },
        {
          "type": "TXT",
          "records": [
            "\"v=spf1 a:mail.domainless.fun -all\""
          ]
        }
      ]
    },
    "ssl": {
      "subject": {
        "CN": "jandgstudios.fun"
      },
      "issuer": {
        "C": "US",
        "O": "Let's Encrypt",
        "CN": "E7"
      },
      "validFrom": "Apr  4 09:45:26 2026 GMT",
      "validTo": "Jul  3 09:45:25 2026 GMT",
      "serialNumber": "063C94B40C16CF19B97E8E03F45B81900338",
      "fingerprint": "4E:56:E1:8B:D4:66:99:AD:58:BD:79:87:49:90:DA:1A:FE:10:4D:CB",
      "fingerprint256": "EA:B6:F2:CC:FE:72:40:50:F4:1C:A3:AD:57:FB:D9:A3:02:E3:40:AC:CA:EC:4F:C8:F2:89:21:65:86:98:89:0D",
      "subjectAltName": "DNS:jandgstudios.fun, DNS:www.jandgstudios.fun",
      "bits": 256,
      "expired": false,
      "daysLeft": 50
    },
    "headers": {
      "url": "https://jandgstudios.fun",
      "headers": {
        "server": "nginx",
        "date": "Wed, 13 May 2026 15:13:08 GMT",
        "content-type": "text/html",
        "content-length": "15133",
        "last-modified": "Tue, 05 May 2026 14:06:17 GMT",
        "vary": "Accept-Encoding",
        "etag": "\"69f9f959-3b1d\"",
        "strict-transport-security": "max-age=63072000; includeSubDomains; preload",
        "x-content-type-options": "nosniff",
        "x-frame-options": "DENY",
        "referrer-policy": "strict-origin-when-cross-origin",
        "permissions-policy": "camera=(), microphone=(), geolocation=(), payment=()",
        "content-security-policy": "default-src 'self'; style-src 'self' 'unsafe-inline' https://domainless.fun; script-src 'self' 'unsafe-inline' https://domainless.fun; font-src 'self' https://domainless.fun; img-src 'self' data: https://domainless.fun; connect-src 'self' https://domainless.fun https://api.ipify.org https://api6.ipify.org https://api64.ipify.org; frame-ancestors 'none'; base-uri 'self'; form-action 'self'",
        "accept-ranges": "bytes"
      },
      "securityChecks": {
        "strict-transport-security": {
          "present": true,
          "severity": "high",
          "name": "HSTS"
        },
        "content-security-policy": {
          "present": true,
          "severity": "high",
          "name": "CSP"
        },
        "x-frame-options": {
          "present": true,
          "severity": "medium",
          "name": "X-Frame-Options"
        },
        "x-content-type-options": {
          "present": true,
          "severity": "medium",
          "name": "X-Content-Type-Options"
        },
        "x-xss-protection": {
          "present": false,
          "severity": "low",
          "name": "X-XSS-Protection"
        },
        "referrer-policy": {
          "present": true,
          "severity": "low",
          "name": "Referrer-Policy"
        },
        "permissions-policy": {
          "present": true,
          "severity": "low",
          "name": "Permissions-Policy"
        }
      },
      "infoLeaks": {
        "server": "nginx"
      }
    },
    "subdomains": {
      "domain": "jandgstudios.fun",
      "checked": 651,
      "wordlist_source": "default",
      "found": 3,
      "results": [
        {
          "subdomain": "www.jandgstudios.fun",
          "ips": [
            "38.15.59.248"
          ],
          "found": true
        },
        {
          "subdomain": "mail.jandgstudios.fun",
          "ips": [
            "38.15.59.248"
          ],
          "found": true
        },
        {
          "subdomain": "vpn.jandgstudios.fun",
          "ips": [
            "38.15.59.248"
          ],
          "found": true
        }
      ]
    },
    "takeover": {
      "domain": "jandgstudios.fun",
      "checked": 3,
      "cnameMatched": 0,
      "vulnerable": 0,
      "findings": []
    },
    "cves": {
      "target": "https://jandgstudios.fun",
      "inspected": [
        "nginx"
      ],
      "findings": [],
      "cveCount": 0,
      "databaseSize": 9
    },
    "wayback": {
      "domain": "jandgstudios.fun",
      "checked": 0,
      "urls": []
    }
  },
  "dast": {
    "leaks": {
      "url": "https://jandgstudios.fun",
      "checked": 21,
      "found": 1,
      "results": [
        {
          "path": "/robots.txt",
          "status": 200,
          "size": 24,
          "risk": "info",
          "desc": "Robots file",
          "verified": true
        }
      ],
      "findings": [
        {
          "severity": "info",
          "issue": "Robots file: /robots.txt (verified, 24 bytes)"
        }
      ]
    },
    "secrets": {
      "url": "https://jandgstudios.fun",
      "scriptsInspected": 2,
      "inlineScripts": 1,
      "externalScripts": 1,
      "externalScanned": 1,
      "secrets": [],
      "secretCount": 0,
      "endpoints": [],
      "endpointCount": 0,
      "inspected": [
        {
          "kind": "inline",
          "index": 0,
          "bytes": 1427,
          "secrets": 0,
          "endpoints": 0
        },
        {
          "kind": "external",
          "url": "https://jandgstudios.fun/account-nav.js",
          "bytes": 1307,
          "secrets": 0,
          "endpoints": 0
        }
      ]
    },
    "crawl": {
      "target": "https://jandgstudios.fun",
      "pagesVisited": 30,
      "sitemap": [
        {
          "url": "https://jandgstudios.fun",
          "status": "ok",
          "size": 15100,
          "links": 20
        },
        {
          "url": "https://jandgstudios.fun/favicon.png",
          "status": "ok",
          "size": 1615,
          "links": 0
        },
        {
          "url": "https://jandgstudios.fun/",
          "status": "ok",
          "size": 15100,
          "links": 0
        },
        {
          "url": "https://jandgstudios.fun/style.css",
          "status": "ok",
          "size": 41456,
          "links": 0
        },
        {
          "url": "https://jandgstudios.fun/romp",
          "status": "ok",
          "size": 18617,
          "links": 3
        },
        {
          "url": "https://jandgstudios.fun/apis",
          "status": "ok",
          "size": 22729,
          "links": 5
        },
        {
          "url": "https://jandgstudios.fun/domainless",
          "status": "ok",
          "size": 16425,
          "links": 0
        },
        {
          "url": "https://jandgstudios.fun/vivarium",
          "status": "ok",
          "size": 11716,
          "links": 0
        },
        {
          "url": "https://jandgstudios.fun/docs",
          "status": "ok",
          "size": 6264,
          "links": 8
        },
        {
          "url": "https://jandgstudios.fun/about",
          "status": "ok",
          "size": 12220,
          "links": 0
        },
        {
          "url": "https://jandgstudios.fun/contact",
          "status": "ok",
          "size": 6758,
          "links": 0
        },
        {
          "url": "https://jandgstudios.fun/scan",
          "status": "ok",
          "size": 17678,
          "links": 0
        },
        {
          "url": "https://jandgstudios.fun/lite/",
          "status": "ok",
          "size": 66431,
          "links": 0
        },
        {
          "url": "https://jandgstudios.fun/license",
          "status": "ok",
          "size": 15646,
          "links": 0
        },
        {
          "url": "https://jandgstudios.fun/security",
          "status": "ok",
          "size": 14644,
          "links": 1
        },
        {
          "url": "https://jandgstudios.fun/scan-api",
          "status": "ok",
          "size": 27711,
          "links": 0
        },
        {
          "url": "https://jandgstudios.fun/domainless-email",
          "status": "ok",
          "size": 28445,
          "links": 0
        },
        {
          "url": "https://jandgstudios.fun/domainless-crosspost",
          "status": "ok",
          "size": 32762,
          "links": 0
        },
        {
          "url": "https://jandgstudios.fun/capsule/",
          "status": "ok",
          "size": 0,
          "links": 0
        },
        {
          "url": "https://jandgstudios.fun/account",
          "status": "ok",
          "size": 21221,
          "links": 0
        },
        {
          "url": "https://jandgstudios.fun/acceptable-use",
          "status": "ok",
          "size": 16486,
          "links": 0
        },
        {
          "url": "https://jandgstudios.fun/pricing",
          "status": "ok",
          "size": 14785,
          "links": 0
        },
        {
          "url": "https://jandgstudios.fun/modules",
          "status": "ok",
          "size": 23415,
          "links": 0
        },
        {
          "url": "https://jandgstudios.fun/architecture",
          "status": "ok",
          "size": 9670,
          "links": 0
        },
        {
          "url": "https://jandgstudios.fun/domainless-sso",
          "status": "ok",
          "size": 30336,
          "links": 0
        },
        {
          "url": "https://jandgstudios.fun/image-api",
          "status": "ok",
          "size": 27855,
          "links": 0
        },
        {
          "url": "https://jandgstudios.fun/code-api",
          "status": "ok",
          "size": 31519,
          "links": 0
        },
        {
          "url": "https://jandgstudios.fun/music-api",
          "status": "ok",
          "size": 28164,
          "links": 0
        },
        {
          "url": "https://jandgstudios.fun/video-api",
          "status": "ok",
          "size": 28928,
          "links": 0
        },
        {
          "url": "https://jandgstudios.fun/docs/docs.css",
          "status": "ok",
          "size": 5335,
          "links": 0
        }
      ]
    }
  }
}
,
{
  "target": "domainless.fun",
  "ts": "2026-05-13T09:13:30-06:00",
  "recon": {
    "dns": {
      "target": "domainless.fun",
      "requestedType": "ALL",
      "raw": ";; A records\n38.15.59.248\n\n;; AAAA records\n(none)\n\n;; MX records\n10 mx.domainless.fun.\n\n;; NS records\nns21.domaincontrol.com.\nns22.domaincontrol.com.\n\n;; TXT records\n\"v=spf1 mx -all\"\n\"google-site-verification=iRq03738ZQhyGOjO_0NQvp60_yqu9pp4sTAmP0-CyD4\"",
      "records": [
        {
          "type": "A",
          "records": [
            "38.15.59.248"
          ]
        },
        {
          "type": "AAAA",
          "records": []
        },
        {
          "type": "MX",
          "records": [
            "10 mx.domainless.fun."
          ]
        },
        {
          "type": "NS",
          "records": [
            "ns21.domaincontrol.com.",
            "ns22.domaincontrol.com."
          ]
        },
        {
          "type": "TXT",
          "records": [
            "\"v=spf1 mx -all\"",
            "\"google-site-verification=iRq03738ZQhyGOjO_0NQvp60_yqu9pp4sTAmP0-CyD4\""
          ]
        }
      ]
    },
    "ssl": {
      "subject": {
        "CN": "domainless.fun"
      },
      "issuer": {
        "C": "US",
        "O": "Let's Encrypt",
        "CN": "E8"
      },
      "validFrom": "Apr  4 21:43:15 2026 GMT",
      "validTo": "Jul  3 21:43:14 2026 GMT",
      "serialNumber": "051108ADB85BDA9C3B51F7DED69B6A318688",
      "fingerprint": "BE:F1:6D:83:94:05:EB:42:D5:B2:F1:D6:29:FF:EA:92:FF:88:D1:5B",
      "fingerprint256": "EB:F8:78:7C:B9:1D:D1:D5:CC:96:54:94:A4:1C:3E:BB:D0:50:25:1A:1A:82:FA:27:7A:70:8C:9F:2D:50:A1:D1",
      "subjectAltName": "DNS:domainless.fun, DNS:www.domainless.fun",
      "bits": 256,
      "expired": false,
      "daysLeft": 51
    },
    "headers": {
      "url": "https://domainless.fun",
      "headers": {
        "server": "nginx",
        "date": "Wed, 13 May 2026 15:13:30 GMT",
        "content-type": "text/html; charset=UTF-8",
        "content-length": "7153",
        "vary": "Origin",
        "content-security-policy": "default-src 'self';script-src 'self';style-src 'self' 'unsafe-inline';font-src 'self';img-src 'self' data: blob: https:;connect-src 'self' wss: ws: https://stream.domainless.fun https://music.domainless.fun https://api.stream.domainless.fun https://api.music.domainless.fun;media-src 'self' blob: https://stream.domainless.fun https://music.domainless.fun https://api.stream.domainless.fun https://api.music.domainless.fun;frame-src 'self' https://stream.domainless.fun;script-src-attr 'none';base-uri 'self';form-action 'self';frame-ancestors 'self';object-src 'none';upgrade-insecure-requests",
        "cross-origin-opener-policy": "same-origin",
        "cross-origin-resource-policy": "same-origin",
        "origin-agent-cluster": "?1",
        "referrer-policy": "strict-origin-when-cross-origin",
        "strict-transport-security": "max-age=63072000; includeSubDomains; preload",
        "x-content-type-options": "nosniff",
        "x-dns-prefetch-control": "off",
        "x-download-options": "noopen",
        "x-frame-options": "SAMEORIGIN",
        "x-permitted-cross-domain-policies": "none",
        "x-xss-protection": "0",
        "access-control-allow-credentials": "true",
        "x-ratelimit-limit": "300",
        "x-ratelimit-remaining": "299",
        "x-ratelimit-reset": "1778685271",
        "accept-ranges": "bytes",
        "cache-control": "public, max-age=0",
        "last-modified": "Tue, 12 May 2026 05:48:12 GMT",
        "etag": "W/\"1bf1-19e1aba8610\""
      },
      "securityChecks": {
        "strict-transport-security": {
          "present": true,
          "severity": "high",
          "name": "HSTS"
        },
        "content-security-policy": {
          "present": true,
          "severity": "high",
          "name": "CSP"
        },
        "x-frame-options": {
          "present": true,
          "severity": "medium",
          "name": "X-Frame-Options"
        },
        "x-content-type-options": {
          "present": true,
          "severity": "medium",
          "name": "X-Content-Type-Options"
        },
        "x-xss-protection": {
          "present": true,
          "severity": "low",
          "name": "X-XSS-Protection"
        },
        "referrer-policy": {
          "present": true,
          "severity": "low",
          "name": "Referrer-Policy"
        },
        "permissions-policy": {
          "present": false,
          "severity": "low",
          "name": "Permissions-Policy"
        }
      },
      "infoLeaks": {
        "server": "nginx"
      }
    },
    "subdomains": {
      "domain": "domainless.fun",
      "checked": 651,
      "wordlist_source": "default",
      "found": 12,
      "results": [
        {
          "subdomain": "www.domainless.fun",
          "ips": [
            "38.15.59.248"
          ],
          "found": true
        },
        {
          "subdomain": "mail.domainless.fun",
          "ips": [
            "38.15.59.248"
          ],
          "found": true
        },
        {
          "subdomain": "vpn.domainless.fun",
          "ips": [
            "38.15.59.248"
          ],
          "found": true
        },
        {
          "subdomain": "mx.domainless.fun",
          "ips": [
            "5.45.106.183"
          ],
          "found": true
        },
        {
          "subdomain": "img.domainless.fun",
          "ips": [
            "38.15.59.248"
          ],
          "found": true
        },
        {
          "subdomain": "search.domainless.fun",
          "ips": [
            "38.15.59.248"
          ],
          "found": true
        },
        {
          "subdomain": "stats.domainless.fun",
          "ips": [
            "38.15.59.248"
          ],
          "found": true
        },
        {
          "subdomain": "stream.domainless.fun",
          "ips": [
            "38.15.59.248"
          ],
          "found": true
        },
        {
          "subdomain": "music.domainless.fun",
          "ips": [
            "38.15.59.248"
          ],
          "found": true
        },
        {
          "subdomain": "server.domainless.fun",
          "ips": [
            "38.15.59.248"
          ],
          "found": true
        },
        {
          "subdomain": "matrix.domainless.fun",
          "ips": [
            "38.15.59.248"
          ],
          "found": true
        },
        {
          "subdomain": "email.domainless.fun",
          "ips": [
            "38.15.59.248"
          ],
          "found": true
        }
      ]
    },
    "takeover": {
      "domain": "domainless.fun",
      "checked": 6,
      "cnameMatched": 0,
      "vulnerable": 0,
      "findings": []
    },
    "cves": {
      "target": "https://domainless.fun",
      "inspected": [
        "nginx"
      ],
      "findings": [],
      "cveCount": 0,
      "databaseSize": 9
    },
    "wayback": {
      "domain": "domainless.fun",
      "checked": 0,
      "urls": []
    }
  },
  "dast": {
    "leaks": {
      "url": "https://domainless.fun",
      "checked": 21,
      "found": 1,
      "results": [
        {
          "path": "/robots.txt",
          "status": 200,
          "size": 99,
          "risk": "info",
          "desc": "Robots file",
          "verified": true
        }
      ],
      "findings": [
        {
          "severity": "info",
          "issue": "Robots file: /robots.txt (verified, 99 bytes)"
        }
      ]
    },
    "secrets": {
      "url": "https://domainless.fun",
      "scriptsInspected": 5,
      "inlineScripts": 2,
      "externalScripts": 3,
      "externalScanned": 3,
      "secrets": [],
      "secretCount": 0,
      "endpoints": [
        "/api/producer/onboard"
      ],
      "endpointCount": 1,
      "inspected": [
        {
          "kind": "inline",
          "index": 0,
          "bytes": 650,
          "secrets": 0,
          "endpoints": 0
        },
        {
          "kind": "inline",
          "index": 1,
          "bytes": 612,
          "secrets": 0,
          "endpoints": 0
        },
        {
          "kind": "external",
          "url": "https://domainless.fun/chrome/chrome-precheck.v1.js",
          "bytes": 1964,
          "secrets": 0,
          "endpoints": 0
        },
        {
          "kind": "external",
          "url": "https://domainless.fun/chrome/chrome.v1.js",
          "bytes": 36120,
          "secrets": 0,
          "endpoints": 0
        },
        {
          "kind": "external",
          "url": "https://domainless.fun/assets/index-Bxv_Hpp_.js",
          "bytes": 313339,
          "secrets": 0,
          "endpoints": 1
        }
      ]
    },
    "crawl": {
      "target": "https://domainless.fun",
      "pagesVisited": 13,
      "sitemap": [
        {
          "url": "https://domainless.fun",
          "status": "ok",
          "size": 7140,
          "links": 11
        },
        {
          "url": "https://domainless.fun/",
          "status": "ok",
          "size": 7140,
          "links": 0
        },
        {
          "url": "https://domainless.fun/manifest.json",
          "status": "ok",
          "size": 1990,
          "links": 0
        },
        {
          "url": "https://domainless.fun/apple-touch-icon.png",
          "status": "ok",
          "size": 2973,
          "links": 0
        },
        {
          "url": "https://domainless.fun/favicon-32.png",
          "status": "ok",
          "size": 507,
          "links": 0
        },
        {
          "url": "https://domainless.fun/fonts/woff2/40fe3cf77260.woff2",
          "status": "ok",
          "size": 34965,
          "links": 0
        },
        {
          "url": "https://domainless.fun/splash-1170x2532.png",
          "status": "ok",
          "size": 21577,
          "links": 0
        },
        {
          "url": "https://domainless.fun/splash-1284x2778.png",
          "status": "ok",
          "size": 24879,
          "links": 0
        },
        {
          "url": "https://domainless.fun/fonts/fonts-slim.css",
          "status": "ok",
          "size": 7220,
          "links": 0
        },
        {
          "url": "https://domainless.fun/chrome/base.v1.css",
          "status": "ok",
          "size": 10128,
          "links": 1
        },
        {
          "url": "https://domainless.fun/chrome/chrome.v1.css",
          "status": "ok",
          "size": 18967,
          "links": 0
        },
        {
          "url": "https://domainless.fun/assets/index-XLFRG7hR.css",
          "status": "ok",
          "size": 71800,
          "links": 0
        },
        {
          "url": "https://domainless.fun/chrome/base.css",
          "status": "ok",
          "size": 144,
          "links": 0
        }
      ]
    }
  }
}

  ]
}
