olx.ro Review

 # sitecode:olxro-desktop
Host: https://www.olx.ro 
Sitemap: https://www.olx.ro/sitemap.xml
User-agent: *
Disallow: */ajax/
Disallow: /adminpanel/
Disallow: /api/
Disallow: */facebook/
Disallow: */rss/
Disallow: */account/
Disallow: */myaccount/
Disallow: /adprint/
Disallow: /payment/
Disallow: /searchform/
Disallow: /adding/confirm/
Disallow: /m/ad/abuse/
Disallow: */landingbundles/
Disallow: *?*bs=ad_page_chat_login_top*
Disallow: *?*bs=ad_page_chat_login_bottom*
Disallow: /i2/oferta/contact/*
Disallow: /api/open/oauth/token/
Disallow: /cont/
Disallow: */i2/*
Allow: /

HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 23 Mar 2026 19:34:41 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://olx.ro/
X-Cache: Redirect from cloudfront
Via: 1.1 cd874fd0ce2f81ddd14f2d3033364a5a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: SEA900-P3
X-Amz-Cf-Id: 0C3Z-D3_sy9RPHBUXQdDDrFVLsYtSQ3hZR2WNGdSVjz8wG2sx1zU0Q==
X-Frame-Options: DENY
Referrer-Policy: no-referrer
Content-Security-Policy: default-src * 'unsafe-eval' data: 'unsafe-inline'; frame-ancestors 'none'; worker-src * 'self' blob:;
X-Content-Type-Options: nosniff

HTTP/1.1 301 Moved Permanently
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Date: Mon, 23 Mar 2026 19:34:41 GMT
Location: https://www.olx.ro/
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 160dd28918b921344551db8cec46dc1a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LAX53-P6
X-Amz-Cf-Id: yWUUKrP-qQe4WjbAjZdrznC3MFjH6HNePIuk1Hcf71ioEJ9Lbdx12g==
X-Frame-Options: DENY
Referrer-Policy: no-referrer
Content-Security-Policy: default-src * 'unsafe-eval' data: 'unsafe-inline'; frame-ancestors 'none'; worker-src * 'self' blob:;
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload

HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Date: Mon, 23 Mar 2026 19:34:42 GMT
Vary: Accept-Encoding
Content-Encoding: br
Server: nginx
Referrer-Policy: strict-origin-when-cross-origin
Content-Security-Policy: default-src 'self' *  ;style-src  https: data: 'unsafe-inline';img-src  https: blob: data:;child-src data:;object-src 'none';worker-src blob: https://*.olx.ro  ;frame-src  https: blob:;script-src  https: 'unsafe-inline' 'unsafe-eval';font-src data: 'self' https: ;connect-src 'self' * blob:
Cross-Origin-Resource-Policy: cross-origin
X-Permitted-Cross-Domain-Policies: none
X-DNS-Prefetch-Control: off
Expect-CT: max-age=0
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=15552000; includeSubDomains
X-Download-Options: noopen
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Permissions-Policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=*, cross-origin-isolated=(self), display-capture=(self), document-domain=(self), encrypted-media=(self), execution-while-not-rendered=(self), execution-while-out-of-viewport=(self), fullscreen=*, geolocation=*, gyroscope=(), magnetometer=(), microphone=(), midi=(), navigation-override=(self), payment=*, picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(), usb=(), web-share=*, xr-spatial-tracking=()
X-T: True
X-Server: OLXcdn
ETag: W/"265a3-giVdMHpnlR4cEg5GsMas/3oBhNs"
X-Cache: Miss from cloudfront
Via: 1.1 b7b9d4ff5955525f07b19c08b74c752e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LAX53-P6
X-Amz-Cf-Id: hfng5BwENrhH5F97IS6qzYI__w2e6MYRycvFdZBsy8o_QLBliFoovg==