tomba.io Review

 # tomba.io robots.txt File
# Last update : 26/January/2023
User-agent: *
Allow: /

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 23 Aug 2025 16:29:03 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 16275
Connection: keep-alive
Vary: Accept-Encoding
ETag: "3f93-cOMtZLPe7MKjOtFOHcD70a8+AIw"
Last-Modified: Thu, 21 Aug 2025 10:53:08 GMT
Content-Encoding: br
Cache-Control: public, max-age=31536000
Content-Security-Policy: connect-src 'self' blob: tomba.io *.tomba.io google.com *.google.com *.doubleclick.net *.tawk.to *.intercom.io wss://*.intercom.io wss://*.tawk.to *.paddle.com *.spreedly.com *.localizecdn.com *.sentry.io *.googletagmanager.com www.google-analytics.com *.google.com *.partnero.com; default-src 'self'; font-src 'self' tomba.io *.tomba.io *.tawk.to *.intercomcdn.com fonts.gstatic.com; frame-src 'self' *.paddle.com *.tawk.to *.googletagmanager.com *.google.com *.doubleclick.net recaptcha.net/recaptcha/ www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.getsmartcue.com; img-src 'self' blob: data: tomba.io *.tomba.io *.intercomassets.com *.betterstack.com *.intercomcdn.com *.facebook.com *.partnero.com *.google.com *.tawk.to placehold.co *.gstatic.com *.gravatar.com/; manifest-src 'self'; media-src 'self' blob: tomba.io *.tomba.io *.vine.co; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' tomba.io *.tomba.io cdn.jsdelivr.net *.facebook.net *.partnero.com *.paddle.com *.tawk.to *.intercom.io *.intercomcdn.com *.doubleclick.net recaptcha.net/recaptcha/ www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.googletagmanager.com *.google.com; style-src 'self' 'unsafe-inline' *.google.com tomba.io *.tomba.io *.tawk.to *.paddle.com; worker-src 'self' blob:; block-all-mixed-content; upgrade-insecure-requests;
Cross-Origin-Embedder-Policy: unsafe-none
Cross-Origin-Opener-Policy: same-origin-allow-popups
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 1; mode=block
Permissions-Policy: camera=(), display-capture=(), fullscreen=(), geolocation=(), microphone=()
X-Permitted-Cross-Domain-Policies: none
X-Tomba-Origin: ASIASERVER
X-Tomba-Country: JP