olx.bg Review

 # sitecode:olxbg-desktop
Host: https://www.olx.bg 
Sitemap: https://www.olx.bg/sitemap.xml
User-agent: *
Disallow: */ajax/
Disallow: /adminpanel/
Disallow: /api/
Disallow: */facebook/
Disallow: */rss/
Disallow: */account/
Disallow: */myaccount/
Disallow: /adprint/
Disallow: /ad/leaflet/
Disallow: /ad/contact/
Disallow: /payment/
Disallow: /searchform/
Disallow: /adding/confirm/
Disallow: /adding/confirmpage/
Disallow: /i2/ad/abuse/
Disallow: /m/ad/abuse/
Disallow: /i2/ad/contact/*
Disallow: /api/open/oauth/token/
Disallow: */i2/*
Allow: /

HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 25 Aug 2025 18:21:04 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://olx.bg/
X-Cache: Redirect from cloudfront
Via: 1.1 25b9a991f871f75614e7f92f97b136a4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: SEA73-P2
X-Amz-Cf-Id: uGmX0yU3spz2RZIGJ3B2cBXKt1Te_71cLssPHvy18UzRA4IiYj4vsw==
X-Frame-Options: DENY
Referrer-Policy: no-referrer
Content-Security-Policy: default-src * 'unsafe-eval' data: 'unsafe-inline'; frame-ancestors 'none'; worker-src * 'self' blob:;
X-Content-Type-Options: nosniff

HTTP/1.1 301 Moved Permanently
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Date: Mon, 25 Aug 2025 18:21:04 GMT
Location: https://www.olx.bg/
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 f7f2e47eadba9e9fe43b1a86859073aa.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LAX54-P2
X-Amz-Cf-Id: 8bOsldsjv3KT20dsUvOssm3tDaLA8dklAnyTtaa8u1zd9WAqtlOAOQ==
X-Frame-Options: DENY
Referrer-Policy: no-referrer
Content-Security-Policy: default-src * 'unsafe-eval' data: 'unsafe-inline'; frame-ancestors 'none'; worker-src * 'self' blob:;
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload

HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Date: Mon, 25 Aug 2025 18:21:05 GMT
ETag: W/"26600-aNde1d/U2bGn7Av+pzuPN0ioc2U"
Content-Encoding: gzip
Server: nginx
Vary: Accept-Encoding
Referrer-Policy: strict-origin-when-cross-origin
Content-Security-Policy: default-src 'self' *  ;style-src  https: data: 'unsafe-inline';img-src  https: blob: data:;child-src data:;object-src 'none';worker-src blob: https://*.olx.bg  ;frame-src  https: blob:;script-src  https: 'unsafe-inline' 'unsafe-eval';font-src data: 'self' https: ;connect-src 'self' * blob:
Cross-Origin-Resource-Policy: cross-origin
X-Permitted-Cross-Domain-Policies: none
X-DNS-Prefetch-Control: off
Expect-CT: max-age=0
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=15552000; includeSubDomains
X-Download-Options: noopen
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Permissions-Policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=*, cross-origin-isolated=(self), display-capture=(self), document-domain=(self), encrypted-media=(self), execution-while-not-rendered=(self), execution-while-out-of-viewport=(self), fullscreen=*, geolocation=*, gyroscope=(), magnetometer=(), microphone=(), midi=(), navigation-override=(self), payment=*, picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(), usb=(), web-share=*, xr-spatial-tracking=()
X-T: True
X-Server: OLXcdn
X-Cache: Miss from cloudfront
Via: 1.1 c25f257e7239c57f045fca0c00a769e8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LAX54-P2
X-Amz-Cf-Id: 0DpFyQgJya3r_ICqKxDoeVdzwC7xWv-H8ZAKOKSKt6w7A_94YIGYJw==