olx.ro Review

 # sitecode:olxro-desktop
Host: https://www.olx.ro 
Sitemap: https://www.olx.ro/sitemap.xml
User-agent: *
Disallow: */ajax/
Disallow: /adminpanel/
Disallow: /api/
Disallow: */facebook/
Disallow: */rss/
Disallow: */account/
Disallow: */myaccount/
Disallow: /adprint/
Disallow: /payment/
Disallow: /searchform/
Disallow: /adding/confirm/
Disallow: /m/ad/abuse/
Disallow: */landingbundles/
Disallow: *?*bs=ad_page_chat_login_top*
Disallow: *?*bs=ad_page_chat_login_bottom*
Disallow: /i2/oferta/contact/*
Disallow: /api/open/oauth/token/
Disallow: /cont/
Disallow: */i2/*
Allow: /

HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Sun, 09 Aug 2026 20:25:10 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://olx.ro/
X-Cache: Redirect from cloudfront
Via: 1.1 72f471c34ab2f1da7c46206e0f599278.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LAX53-P6
X-Amz-Cf-Id: adA6i7kvT_KJWhkrsy87UC4fgnjUD4PFjezgzouJNXOZPN9kq3LMuw==
X-Frame-Options: DENY
Referrer-Policy: no-referrer
Content-Security-Policy: default-src * 'unsafe-eval' data: 'unsafe-inline'; frame-ancestors 'none'; worker-src * 'self' blob:;
X-Content-Type-Options: nosniff

HTTP/1.1 301 Moved Permanently
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Date: Sun, 09 Aug 2026 20:25:11 GMT
Location: https://www.olx.ro/
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 9f5987600ae02814b698233e1842c294.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LAX53-P6
X-Amz-Cf-Id: nDybQIyVmtEF5MurhH9qhlIYDWcHHqn34JkMnJKmGOxLuSbGLLZsBA==
X-Frame-Options: DENY
Referrer-Policy: no-referrer
Content-Security-Policy: default-src * 'unsafe-eval' data: 'unsafe-inline'; frame-ancestors 'none'; worker-src * 'self' blob:;
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload

HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Date: Sun, 09 Aug 2026 20:25:12 GMT
Vary: Accept-Encoding
Content-Encoding: br
Server: nginx
Referrer-Policy: strict-origin-when-cross-origin
Content-Security-Policy: default-src 'self' *  ;style-src  https: data: 'unsafe-inline';img-src  https: blob: data:;child-src data:;object-src 'none';worker-src blob: https://*.olx.ro  ;frame-src  https: blob:;script-src  https: 'unsafe-inline' 'unsafe-eval';font-src data: 'self' https: ;connect-src 'self' * blob:
Cross-Origin-Resource-Policy: cross-origin
X-Permitted-Cross-Domain-Policies: none
X-DNS-Prefetch-Control: off
Expect-CT: max-age=0
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=15552000; includeSubDomains
X-Download-Options: noopen
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Permissions-Policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=*, cross-origin-isolated=(self), display-capture=(self), document-domain=(self), encrypted-media=(self), execution-while-not-rendered=(self), execution-while-out-of-viewport=(self), fullscreen=*, geolocation=*, gyroscope=(), magnetometer=(), microphone=(self), midi=(), navigation-override=(self), payment=*, picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(self), sync-xhr=(), usb=(), web-share=*, xr-spatial-tracking=()
X-T: True
X-Server: OLXcdn
ETag: W/"265a3-giVdMHpnlR4cEg5GsMas/3oBhNs"
X-Cache: Miss from cloudfront
Via: 1.1 85e660bc5e54e6020597f85d8b86f362.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LAX53-P6
X-Amz-Cf-Id: wXjwSjteay92E3jmPSz_VjKOEzxmVM71yHEVd7OXGimRHzfIp8JAEg==