vaway.vn Review

 User-agent: *
Disallow: /admin/
Disallow: /composer.json
Disallow: /data/
Disallow: /includes/
Disallow: /install/
Disallow: /modules/
Disallow: /robots.php
Disallow: /web.config
Disallow: /hanakoreagroup/users/
Disallow: /hanakoreagroup/statistics/
Sitemap: http://vaway.vn/sitemap.xml

HTTP/1.1 200 OK
Date: Sat, 23 Aug 2025 20:19:54 GMT
Server: Apache/2
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Referrer-Policy: no-referrer-when-downgrade, strict-origin-when-cross-origin
Permissions-Policy: accelerometer=(self), autoplay=(self "https://youtube.com" "https://www.youtube.com" "https://*.youtube.com"), camera=(self), display-capture=(self), encrypted-media=(self), fullscreen=(self "https://youtube.com" "https://www.youtube.com" "https://*.youtube.com"), gamepad=(self), geolocation=(self), gyroscope=(self), hid=(self), identity-credentials-get=(self), idle-detection=(self), local-fonts=(self), magnetometer=(self), microphone=(self), midi=(self), otp-credentials=(self), payment=(self), picture-in-picture=(self "https://youtube.com" "https://www.youtube.com" "https://*.youtube.com"), publickey-credentials-get=(self), screen-wake-lock=(self), serial=(self), storage-access=(self), usb=(self), web-share=(self), window-management=(self), xr-spatial-tracking=(self)
Feature-Policy: accelerometer 'self'; autoplay 'self' https://youtube.com https://www.youtube.com; camera 'self'; display-capture 'self'; encrypted-media 'self'; fullscreen 'self' https://youtube.com https://www.youtube.com; gamepad 'self'; geolocation 'self'; gyroscope 'self'; hid 'self'; identity-credentials-get 'self'; idle-detection 'self'; local-fonts 'self'; magnetometer 'self'; microphone 'self'; midi 'self'; otp-credentials 'self'; payment 'self'; picture-in-picture 'self' https://youtube.com https://www.youtube.com; publickey-credentials-get 'self'; screen-wake-lock 'self'; serial 'self'; storage-access 'self'; usb 'self'; web-share 'self'; window-management 'self'; xr-spatial-tracking 'self'
Cache-Control: max-age=0, no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: -1
Set-Cookie: nv4_ctr=MTU3XzdfMTg0XzMwLkpQ; expires=Sun, 23-Aug-2026 20:19:54 GMT; Max-Age=31536000; path=/; HttpOnly; SameSite=Lax
Set-Cookie: nv4_sess=m0fp0vdbslgmihun1ifrfp2ab4; path=/; HttpOnly; SameSite=Lax
Set-Cookie: nv4_statistic_vi=Yqry-f6TbsW5VI37qDT5cg%2C%2C; expires=Sat, 23-Aug-2025 20:49:54 GMT; Max-Age=1800; path=/; HttpOnly; SameSite=Lax
Set-Cookie: nv4_nvvithemever=gAxX15Oy1f480fvaF2AU7A%2C%2C; expires=Tue, 18-Aug-2026 20:19:54 GMT; Max-Age=31104000; path=/; HttpOnly; SameSite=Lax
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Fri, 22 Aug 2025 20:19:54 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 10330
Keep-Alive: timeout=2, max=100
Content-Type: text/html; charset=utf-8