finapi.io Review

 # START WPFORMS BLOCK
# ---------------------------
User-agent: *
Disallow: /wp-content/uploads/wpforms/
# ---------------------------
# END WPFORMS BLOCK

# START YOAST BLOCK
# ---------------------------
User-agent: *
Disallow:

Sitemap: https://www.finapi.io/sitemap_index.xml
# ---------------------------
# END YOAST BLOCK

HTTP/1.1 200 OK
date: Wed, 11 Nov 2026 22:33:11 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/8.3
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests;
permissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
x-permitted-cross-domain-policies: none
cross-origin-opener-policy: unsafe-none
cross-origin-resource-policy: cross-origin
access-control-allow-methods: GET,POST
access-control-allow-headers: Content-Type, Authorization
permissions-policy: private-state-token-redemption=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com"), private-state-token-issuance=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com")
link: ; rel="https://api.w.org/"
link: ; rel="alternate"; title="JSON"; type="application/json"
link: ; rel=shortlink
cache-control: max-age=0
expires: Wed, 11 Nov 2026 22:33:10 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
permissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
x-permitted-cross-domain-policies: none
cross-origin-opener-policy: unsafe-none
cross-origin-resource-policy: cross-origin
access-control-allow-methods: GET,POST
access-control-allow-headers: Content-Type, Authorization
x-iplb-request-id: 90D90206:85BC_058717A4:0050_6AF4ED24_336F7:3BCB5A
Content-Encoding: br
Age: 0
X-CDN-Cache: MISS
X-CDN-Request-ID: 3079824
X-CDN-Pop: bhs
Accept-Ranges: bytes
Content-Length: 46143
Connection: keep-alive