olx.pl Review

 # sitecode:olxpl-desktop
Host: https://www.olx.pl 
Sitemap: https://www.olx.pl/sitemap.xml
User-agent: *
Disallow: */ajax/
Disallow: /adminpanel/
Disallow: /api/
Disallow: */facebook/
Disallow: */rss/
Disallow: */konto/
Disallow: */mojolx/
Disallow: /drukuj/
Disallow: /oferta/ulotka/
Disallow: /oferta/kontakt/
Disallow: /platnosci/
Disallow: /searchform/
Disallow: /nowe-ogloszenie/confirm/
Disallow: /nowe-ogloszenie/confirmpage/
Disallow: /i2/oferta/abuse/
Disallow: /m/oferta/abuse/
Disallow: /i2/oferta/kontakt/*
Disallow: /api/open/oauth/token/
Disallow: */i2/*
Allow: /api/v1/offers/
Allow: /api/v1/targeting/
Allow: /api/v1/friendly-links/
Allow: /

HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Sat, 10 Oct 2026 18:24:16 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://olx.pl/
X-Cache: Redirect from cloudfront
Via: 1.1 1269d81ca2256934518d6de06b6b4d92.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LAX54-P7
X-Amz-Cf-Id: 59nnskh5xe3EgucNnNzw8FkZtMV16BKfK3f53eyJlNObJ9ZN5354Cw==
X-Frame-Options: DENY
Referrer-Policy: no-referrer
Content-Security-Policy: default-src * 'unsafe-eval' data: 'unsafe-inline'; frame-ancestors 'none'; worker-src * 'self' blob:;
X-Content-Type-Options: nosniff

HTTP/1.1 301 Moved Permanently
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Date: Sat, 10 Oct 2026 18:24:17 GMT
Location: https://www.olx.pl/
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 1f0f9d5055e6844863a2a5cfb8d3194c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LAX54-P7
X-Amz-Cf-Id: z4e8bKWPqAJ67xf2L4AwPwKv3AGRXM3nKpzEX0D6WrIjmA5I2PPmeQ==
X-Frame-Options: DENY
Referrer-Policy: no-referrer
Content-Security-Policy: default-src * 'unsafe-eval' data: 'unsafe-inline'; frame-ancestors 'none'; worker-src * 'self' blob:;
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload

HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Date: Sat, 10 Oct 2026 18:24:17 GMT
Vary: Accept-Encoding
Content-Encoding: br
Server: nginx
Referrer-Policy: strict-origin-when-cross-origin
Content-Security-Policy: default-src 'self' *  ;style-src  https: data: 'unsafe-inline';img-src  https: blob: data:;child-src data:;object-src 'none';worker-src blob: https://*.olx.pl  ;frame-src  https: blob:;script-src  https: 'unsafe-inline' 'unsafe-eval';font-src data: 'self' https: ;connect-src 'self' * blob:
Cross-Origin-Resource-Policy: cross-origin
X-Permitted-Cross-Domain-Policies: none
X-DNS-Prefetch-Control: off
Expect-CT: max-age=0
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=15552000; includeSubDomains
X-Download-Options: noopen
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Permissions-Policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=*, cross-origin-isolated=(self), display-capture=(self), document-domain=(self), encrypted-media=(self), execution-while-not-rendered=(self), execution-while-out-of-viewport=(self), fullscreen=*, geolocation=*, gyroscope=(), magnetometer=(), microphone=(self), midi=(), navigation-override=(self), payment=*, picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(self), sync-xhr=(), usb=(), web-share=*, xr-spatial-tracking=()
X-T: True
X-Server: OLXcdn
ETag: W/"2653f-SIGwCOGNxcwl1/DVkXX4J7GjPKo"
X-Cache: Miss from cloudfront
Via: 1.1 7c1c351eb399873dd14a46d8639e011c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: SFO53-P9
X-Amz-Cf-Id: wg6_pVJlSyFd6d_ZaDdFpC5VVhHf27gOpHx0Qs1W216WMCqVY662Rg==