HTTP/2 200 content-type: text/html; charset=utf-8 date: Sat, 31 Jan 2026 08:32:01 GMT vary: Accept-Encoding content-encoding: gzip server: nginx referrer-policy: strict-origin-when-cross-origin content-security-policy: default-src 'self' * ;style-src https: data: 'unsafe-inline';img-src https: blob: data:;child-src data:;object-src 'none';worker-src blob: https://*.olx.pt ;frame-src https: blob:;script-src https: 'unsafe-inline' 'unsafe-eval';font-src data: 'self' https: ;connect-src 'self' * blob: cross-origin-resource-policy: cross-origin x-permitted-cross-domain-policies: none x-dns-prefetch-control: off expect-ct: max-age=0 x-frame-options: SAMEORIGIN strict-transport-security: max-age=15552000; includeSubDomains x-download-options: noopen x-content-type-options: nosniff x-xss-protection: 0 permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=*, cross-origin-isolated=(self), display-capture=(self), document-domain=(self), encrypted-media=(self), execution-while-not-rendered=(self), execution-while-out-of-viewport=(self), fullscreen=*, geolocation=*, gyroscope=(), magnetometer=(), microphone=(), midi=(), navigation-override=(self), payment=*, picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(), usb=(), web-share=*, xr-spatial-tracking=() x-t: True x-server: OLXcdn access-control-allow-origin: * cache-control: public, max-age=300 x-cache: Miss from cloudfront via: 1.1 e33e605f2931e1a586cd356e7b3dcd96.cloudfront.net (CloudFront) x-amz-cf-pop: TLV55-P1 x-amz-cf-id: Dgo971BTvAx5pmryETzqxbwTPe8TYnsNEMi9S1SPl3AZcRtk6uBhxQ==