olx.pt

HTML metadata

Title

Portugal Anúncios Classificados OLX

Description

Portugal oferece anúncios classificados locais para emprego, à venda, imóveis, serviços, comunidade e eventos - Publique o seu anúncio classificado grátis

Canonical

https://www.olx.pt/

Translations

ru ×3
bg
kk
pl
pt
ro
uk
uz

Open Graph

title: Portugal Anúncios Classificados OLX

Technology

CDN: Amazon CloudFront
Server: nginx
CMS: Gatsby

Analytics

Google Analytics
Google Tag Manager

Ads

Google Ads (DoubleClick)

Cookie consent

OneTrust

Third-party hosts loaded (21)

ireland.apollo.olxcdn.com×32
categories.olxcdn.com×16
cdn.slots.baxter.olx.org×3
www.olx.kz×2
www.olx.ua×2
www.olx.uz×2
562916910×1
cdn.cookielaw.org×1
com.fixeads.olxportugal×1
frankfurt.apollo.olxcdn.com×1
js-agent.newrelic.com×1
ninja.data.olxcdn.com×1
securepubads.g.doubleclick.net×1
static.criteo.net×1
tracking.olx-st.com×1
www.google-analytics.com×1
www.googletagmanager.com×1
www.olx.bg×1
www.olx.com×1
www.olx.pl×1
www.olx.ro×1

DNS records live

NS

ns1.olx.pt
ns2.olx.pt
ns3.olx.pt
ns4.olx.pt

MX

1 aspmx.l.google.com
10 alt3.aspmx.l.google.com
10 alt4.aspmx.l.google.com
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com

TXT

_u3w19to6xedw7esolw5z4qzps30gvyq
amazonses:j9fBrRe42uwefagbYkOu0wt2oa/9Eslasb1tT2f3tp0=

Verified for

Apple
Atlassian
Brevo
Google
Workplace
Yahoo
Zoom

Email authentication strong

SPF

v=spf1 ip4:89.26.252.158 ip4:34.252.166.207 include:mail.zendesk.com include:_spf.google.com include:amazonses.com include:spf.sendinblue.com mx -all

strict (-all)

DMARC

v=DMARC1; p=reject; rua=mailto:k6zc3g74cn@rua.powerdmarc.com; ruf=mailto:k6zc3g74cn@ruf.powerdmarc.com; pct=100; sp=reject; fo=0;

policy: reject (enforced) · sp=reject

DKIM

google: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCnG23mo1zzXBFGd7NxGtlDORKIAw+NId9v4/iiaT/qOcongMV02sMWSQFQjVugIr19YA7kpB3TtYzbM2bw65…
mail: k=rsa;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDeMVIzrCa3T14JsNY0IRv5/2V1/v2itlviLQBwXsa7shBD6TrBkswsFUToPyMRWC9tbR/5ey0nRBH0ZVxp+lsmTxid2Y2z…

selectors probed

Certificate (current)

Amazon RSA 2048 M01

from 2025-09-17 to 2026-10-16

Expires in 137 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.olx.pt/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy
cross-origin-resource-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=*, cross-origin-isolated=(self), display-capture=(self), document-domain=(self), encrypted-media=(self), execution-while-not-rendered=(self), execution-while-out-of-viewport=(self), fullscreen=*, geolocation=*, gyroscope=(), magnetometer=(), microphone=(self), midi=(), navigation-override=(self), payment=*, picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(self), sync-xhr=(), usb=(), web-share=*, xr-spatial-tracking=()
x-content-type-options: nosniff
content-security-policy: default-src 'self' * ;style-src https: data: 'unsafe-inline';img-src https: blob: data:;child-src data:;object-src 'none';worker-src blob: https://*.olx.pt ;frame-src https: blob:;script-src https: 'unsafe-inline' 'unsafe-eval';font-src data: 'self' https: ;connect-src 'self' * blob:
strict-transport-security: max-age=15552000; includeSubDomains
cross-origin-resource-policy: cross-origin