financio.co Review

 #
# robots.txt
#
# This file is to prevent the crawling and indexing of certain parts
# of your site by web crawlers and spiders run by sites like Yahoo!
# and Google. By telling these "robots" where not to go on your site,
# you save bandwidth and server resources.
#
# This file will be ignored unless it is at the root of your host:
# Used:    http://example.com/robots.txt
# Ignored: http://example.com/site/robots.txt
#
# For more information about the robots.txt standard, see:
# http://www.robotstxt.org/robotstxt.html

User-agent: *
# CSS, JS, Images
Allow: /core/*.css$
Allow: /core/*.css?
Allow: /core/*.js$
Allow: /core/*.js?
Allow: /core/*.gif
Allow: /core/*.jpg
Allow: /core/*.jpeg
Allow: /core/*.png
Allow: /core/*.svg
Allow: /profiles/*.css$
Allow: /profiles/*.css?
Allow: /profiles/*.js$
Allow: /profiles/*.js?
Allow: /profiles/*.gif
Allow: /profiles/*.jpg
Allow: /profiles/*.jpeg
Allow: /profiles/*.png
Allow: /profiles/*.svg
# Directories
Disallow: /core/
Disallow: /profiles/
# Files
Disallow: /README.md
Disallow: /composer/Metapackage/README.txt
Disallow: /composer/Plugin/ProjectMessage/README.md
Disallow: /composer/Plugin/Scaffold/README.md
Disallow: /composer/Plugin/VendorHardening/README.txt
Disallow: /composer/Template/README.txt
Disallow: /modules/README.txt
Disallow: /sites/README.txt
Disallow: /themes/README.txt
Disallow: /web.config
# Paths (clean URLs)
Disallow: /admin/
Disallow: /comment/reply/
Disallow: /filter/tips
Disallow: /node/add/
Disallow: /search/
Disallow: /user/register
Disallow: /user/password
Disallow: /user/login
Disallow: /user/logout
Disallow: /media/oembed
Disallow: /*/media/oembed
# Paths (no clean URLs)
Disallow: /index.php/admin/
Disallow: /index.php/comment/reply/
Disallow: /index.php/filter/tips
Disallow: /index.php/node/add/
Disallow: /index.php/search/
Disallow: /index.php/user/password
Disallow: /index.php/user/register
Disallow: /index.php/user/login
Disallow: /index.php/user/logout
Disallow: /index.php/media/oembed
Disallow: /index.php/*/media/oembed

HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Mon, 25 Aug 2025 01:25:50 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 305
Connection: keep-alive
X-Content-Type-Options: nosniff
Location: https://financio.co/
Cache-Control: max-age=31536000
Expires: Tue, 25 Aug 2026 01:25:50 GMT
Age: 0
X-Cache: MISS

HTTP/1.1 302 Found
Server: nginx
Date: Mon, 25 Aug 2025 01:25:50 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 0
Connection: keep-alive
X-Content-Type-Options: nosniff
Location: /global/
Age: 4028
X-Cache: HIT

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 25 Aug 2025 01:25:55 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 31162
Connection: keep-alive
Expires: Sat, 26 Jul 1997 05:00:00 GMT
Cache-Control: max-age=0, no-cache, no-store, must-revalidate
Pragma: no-cache
X-XSS-Protection: 1; mode=block
Expect-CT: max-age=7776000, enforce
Access-Control-Allow-Origin: null
Access-Control-Allow-Methods: GET,PUT,POST,DELETE
Access-Control-Allow-Headers: Content-Type, Authorization
X-Content-Security-Policy: default-src 'self'; img-src *; media-src * data:;
X-Content-Type-Options: nosniff
Content-Security-Policy: report-uri https://financio.co
Referrer-Policy: strict-origin-when-cross-origin
Cross-Origin-Embedder-Policy-Report-Only: unsafe-none; report-to="default"
Cross-Origin-Embedder-Policy: unsafe-none; report-to="default"
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="default"
Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="default"
Cross-Origin-Resource-Policy: cross-origin
X-Frame-Options: SAMEORIGIN
Permissions-Policy: accelerometer=(), autoplay=(), camera=(), fullscreen=*, geolocation=(self), gyroscope=(), microphone=(), payment=*
Feature-Policy: display-capture 'self'
X-Permitted-Cross-Domain-Policies: none
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Link: ; rel="https://api.w.org/", ; rel="alternate"; type="application/json", ; rel=shortlink
Set-Cookie: ip2location_redirection_first_visit=1756085151%3Bec675f72ed32c7c478c4e1fd63baf0f9; expires=Tue, 26-Aug-2025 01:25:51 GMT; Max-Age=86400; path=/; secure; HttpOnly
Last-Modified: Mon, 25 Aug 2025 01:25:51 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET,PUT,POST,DELETE
Access-Control-Allow-Headers: Content-Type, Authorization
X-Content-Security-Policy: img-src *; media-src * data:;
X-Permitted-Cross-Domain-Policies: none
Age: 0
X-Cache: MISS
Accept-Ranges: bytes