oda.com Review

 N/A

HTTP/1.1 301 Moved Permanently
Connection: close
Content-Length: 0
Server: Varnish
Retry-After: 0
Location: https://oda.com/
Accept-Ranges: bytes
Date: Sun, 23 Nov 2025 04:23:25 GMT
Via: 1.1 varnish
X-Served-By: cache-tyo11930-TYO
X-Cache: HIT
X-Cache-Hits: 0
X-Timer: S1763871806.929453,VS0,VE0
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

HTTP/1.1 302 Found
Connection: keep-alive
Content-Length: 0
accept-ranges: bytes
set-cookie: _sp_ses.2006=*; Domain=.oda.com; expires=Sun, 23 Nov 2025 04:53:26 GMT; Max-Age=1800; Path=/; SameSite=Lax; Secure
set-cookie: _sp_id.2006=6cc1eae0-30cd-46e8-8807-29f26b8a3f84.1763871806.1.1763871806..b9a1d4e3-e342-46e1-a5d1-021f1fd782fd; Domain=.oda.com; expires=Mon, 23 Nov 2026 04:23:26 GMT; Max-Age=31536000; Path=/; SameSite=Lax; Secure
set-cookie: sessionid=st1jnjt2wzo201dy2tpk8ier0aymed1k; expires=Tue, 23 Dec 2025 04:23:26 GMT; HttpOnly; Max-Age=2592000; Path=/; SameSite=Lax; Secure
content-type: text/html; charset=utf-8
location: /no/
x-xss-protection: 0
via: 1.1 varnish, 1.1 varnish, 1.1 varnish
expires: Thu, 01 Jan 1970 00:00:00 GMT
x-timer: S1763871806.188394,VS0,VE109
x-frame-options: SAMEORIGIN
cache-control: max-age=0, no-cache, no-store, must-revalidate, private
Date: Sun, 23 Nov 2025 04:23:26 GMT
X-Served-By: cache-ams21022-AMS, cache-ams21031-AMS, cache-tyo11974-TYO
X-Cache: MISS, MISS, MISS
X-Cache-Hits: 0, 0, 0
Vary: origin, Cookie
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

HTTP/1.1 200 OK
Connection: keep-alive
accept-ranges: none
set-cookie: _csrfSecret=YQK%2FUOEjUKnTO0bY6n%2BGRZ5F; Path=/; Secure; HttpOnly; SameSite=strict
content-security-policy: default-src 'self'  *.oda.com;img-src 'self' *.oda.com  blob: data: bilder.kolonial.no images.oda.com cdn.sanity.io *.vimeocdn.com translate.googleapis.com api.mapbox.com ct.pinterest.com log.pinterest.com www.facebook.com connect.facebook.net *.google-analytics.com www.google.no *.google.com *.g.doubleclick.net 11208031.fls.doubleclick.net ad.doubleclick.net pagead2.googlesyndication.com ade.googlesyndication.com *.ads.linkedin.com www.linked.com www.google.de www.google.fi www.google.no www.google.se *.googletagmanager.com oda.com storage.googleapis.com *.snapchat.com bat.bing.com analytics.pangle-ads.com log.adtraction.fail checkoutshopper-live.cdn.adyen.com *.adform.net;style-src 'unsafe-inline' 'self' *.oda.com translate.googleapis.com;script-src 'self' 'nonce-ZmVlMWFiM2YtNmY3OC00MGMwLWI2MjgtOGU5YTRhMmQwNjNm' *.oda.com  'sha256-QLN4/tVmbx4rIRUIwpoTvMI9PyCLdP+V6RSDfQMVEfM=' 'sha256-6xYRXGTve/VTSs6Rki/dNOaYbQbQscqyCpbKFoaO/QA=' 'sha256-N4/5hGfx8xkPtfVswEIqYnX0T8THpCSI4Z57gINwoUw=' 'sha256-pp9UFJ03BIMVR5GHQfjyQtsqEXj1PXOGAHmMKwG3Ld0=' js.sentry-cdn.com browser.sentry-cdn.com messenger.dixa.io connect.facebook.net s.pinimg.com ct.pinterest.com www.google.com *.googletagmanager.com www.google-analytics.com ssl.google-analytics.com www.googleadservices.com *.doubleclick.net tpc.googlesyndication.com pagead2.googlesyndication.com snap.licdn.com sc-static.net *.snapchat.com bat.bing.com analytics.tiktok.com gtm.adt313.net tagmanager.google.com polyfill-fastly.io *.adform.net 'sha256-fxHRMinqC0vBTNRBqp3jE/Z3L2SUGTI2uhgm0bCWTkY=';connect-src 'self' *.oda.com   *.sentry.io 1teetjp9.apicdn.sanity.io 1teetjp9.api.sanity.io cdn.sanity.io translate.googleapis.com messenger.dixa.io messenger-edge.dixa.io www.facebook.com ct.pinterest.com *.google.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com www.google.de www.google.fi www.google.no pagead2.googlesyndication.com ad.doubleclick.net *.g.doubleclick.net cdn.linkedin.oribi.io px.ads.linkedin.com *.snapchat.com bat.bing.com analytics.tiktok.com analytics.pangle-ads.com bat.bing.com log.adtraction.fail api.mapbox.com events.mapbox.com *.tiles.mapbox.com vimeo.com checkoutshopper-live.adyen.com checkoutshopper-live.cdn.adyen.com ;frame-src 'self' acs.3dsecure.no player.vimeo.com www.youtube.com messenger.dixa.io ct.pinterest.com www.facebook.com *.g.doubleclick.net *.fls.doubleclick.net td.doubleclick.net tpc.googlesyndication.com *.snapchat.com https://www.googletagmanager.com checkoutshopper-live.adyen.com ;frame-ancestors 'self';font-src 'self' *.oda.com;base-uri 'none';object-src 'none';child-src 'self' *.oda.com  blob:;
content-type: text/html; charset=utf-8
x-xss-protection: 0
via: 1.1 varnish, 1.1 varnish, 1.1 varnish
x-timer: S1763871807.542221,VS0,VE13
x-tienda-web-csrf-token: AAiqUvTLbzuMad2BDMDfc9ujGhz265pCa1HSvGjv
cache-control: private, no-cache, no-store, max-age=0, must-revalidate
x-content-type-options: nosniff
x-nextjs-cache: STALE
etag: W/"tnycouaurp82jk"
content-encoding: br
Date: Sun, 23 Nov 2025 04:23:26 GMT
X-Served-By: cache-ams2100089-AMS, cache-ams21069-AMS, cache-tyo11974-TYO
X-Cache: MISS, MISS, MISS
X-Cache-Hits: 0, 0, 0
Vary: Accept-Encoding
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
transfer-encoding: chunked