My understanding of cross-domain restrictions is that you can't verify which domain is loading you