moai.cash

.cash user

First seen 2026-05-10 · Last seen 2026-05-10 · ok HTTP/1.1 200 97 ms crawled 2026-05-10

US · 216.150.1.1 · AS16509 Amazon.com, Inc.

Reputation 94/100 dmarc monitor-only

sector tech type homepage

HTML metadata

Title: Moai.cash - The Super App for Everyone
Description: Join 1 billion people in the transparent and fair digital transformation. Zero fees, prediction markets, on-chain lottery, and more.
Language: en

Open Graph

title: Moai.cash - The Super App for Everyone
site name: Moai.cash
description: Join 1 billion people in the transparent and fair digital transformation

Technology

CDN: Vercel
CMS: Next.js

Analytics

Google Tag Manager

Third-party hosts loaded (1)

www.googletagmanager.com×1

Social

Contact

Address: st way to send cryptoRead guideStablecoin yield vs savings accountRead guide© 2026

Registration

Registrar

Cloudflare, Inc

Created

2024-04-03

Expires

2027-04-03 317 days left

Updated

2026-03-28

Name servers

kianchau.ns.cloudflare.com
harlee.ns.cloudflare.com

DNS records live

NS

harlee.ns.cloudflare.com
kianchau.ns.cloudflare.com

MX

1 aspmx.l.google.com
10 aspmx2.googlemail.com
10 aspmx3.googlemail.com
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com

Verified for

Google

Email authentication partial

SPF

v=spf1 include:_spf.google.com ~all

softfail (~all)

DMARC

v=DMARC1; p=none; rua=mailto:beadda8929a4419589faf1f78bfd312e@dmarc-reports.cloudflare.net

policy: none (monitoring only)

DKIM

google: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1hWzuPf/rfU6vncnRiN9cbruQxvaiVQDzQKLco+h5r29CuOtVD5jgXRO/wQLXMu/qTUqVzzWMf6XAW…

selectors probed

Certificate (current)

R13

from 2026-04-08 to 2026-07-07

Expires in 48 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://moai.cash/

present

strict-transport-security
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

missing Content Security Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: DENY
permissions-policy: camera=(), microphone=(), geolocation=()
x-content-type-options: nosniff
strict-transport-security: max-age=63072000; includeSubDomains; preload