Url restricting sites to kongregate

I was going to submit some of my games to kongregate with the high scores and challenge APIs. I want to restrict these version so that they can only be played on kongregate (I know it sounds a bit paranoid but I’ve had incomplete versions of my games stolen and hosted before, and since they’d be using the kongregate api the highscore wouldn’t work on other sites). Usually this would be easy, I’d just check for the domain in the _url property as I’ve done for versions on my site, but this doesn’t seem to work.
I’m allowing http://www.kongregate and http://kongregate as ok domains, but this doesn’t seem to work. Should I be looking for something different? Is there any way I could protect the game using the kongregate API?

Try chat.kongregate.com. That’s what MochiBot/website referal things call the domain the games are hosted.

(Else you could do an if() on the Kongregate services, but this would be easy to bypass)

You should allow kongregate.com and any of its sub domains. Ignore the http:// and anything before “kongregate”.