oda.com Review

 N/A

HTTP/1.1 301 Moved Permanently
Connection: close
Content-Length: 0
Server: Varnish
Retry-After: 0
Location: https://oda.com/
Accept-Ranges: bytes
Date: Sun, 09 Nov 2025 05:53:37 GMT
Via: 1.1 varnish
X-Served-By: cache-tyo11981-TYO
X-Cache: HIT
X-Cache-Hits: 0
X-Timer: S1762667618.750216,VS0,VE1
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

HTTP/1.1 302 Found
Connection: keep-alive
Content-Length: 0
via: 1.1 varnish, 1.1 varnish, 1.1 varnish
location: /no/
x-timer: S1762667618.944388,VS0,VE64
content-type: text/html; charset=utf-8
x-frame-options: SAMEORIGIN
expires: Thu, 01 Jan 1970 00:00:00 GMT
accept-ranges: bytes
set-cookie: _sp_ses.2006=*; Domain=.oda.com; expires=Sun, 09 Nov 2025 06:23:37 GMT; Max-Age=1800; Path=/; SameSite=Lax; Secure
set-cookie: _sp_id.2006=9a5df3a5-7f5b-4fd5-8e76-68360c39c312.1762667617.1.1762667617..727199d7-a671-4bcb-8a7d-f02d980ff6ca; Domain=.oda.com; expires=Mon, 09 Nov 2026 05:53:37 GMT; Max-Age=31536000; Path=/; SameSite=Lax; Secure
set-cookie: sessionid=w0bedh5zzxkyh3t7k5i98evxzrezv9hl; expires=Tue, 09 Dec 2025 05:53:37 GMT; HttpOnly; Max-Age=2592000; Path=/; SameSite=Lax; Secure
cache-control: max-age=0, no-cache, no-store, must-revalidate, private
x-xss-protection: 0
Date: Sun, 09 Nov 2025 05:53:38 GMT
X-Served-By: cache-ams2100120-AMS, cache-ams21031-AMS, cache-tyo11969-TYO
X-Cache: MISS, MISS, MISS
X-Cache-Hits: 0, 0, 0
Vary: origin, Cookie
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

HTTP/1.1 200 OK
Connection: keep-alive
via: 1.1 varnish, 1.1 varnish, 1.1 varnish
x-timer: S1762667618.263672,VS0,VE13
content-type: text/html; charset=utf-8
x-nextjs-cache: HIT
accept-ranges: none
set-cookie: _csrfSecret=eMrCYpjnMe%2BVGxsY7LctgYDK; Path=/; Secure; HttpOnly; SameSite=strict
cache-control: private, no-cache, no-store, max-age=0, must-revalidate
x-content-type-options: nosniff
x-tienda-web-csrf-token: AAh2zaPdA7uZSTMNRSGB0VPcq/k2IjpG+YlfxR00
content-security-policy: default-src 'self'  *.oda.com;img-src 'self' *.oda.com  blob: data: bilder.kolonial.no images.oda.com cdn.sanity.io *.vimeocdn.com translate.googleapis.com api.mapbox.com ct.pinterest.com log.pinterest.com www.facebook.com connect.facebook.net *.google-analytics.com www.google.no *.google.com *.g.doubleclick.net 11208031.fls.doubleclick.net ad.doubleclick.net pagead2.googlesyndication.com ade.googlesyndication.com *.ads.linkedin.com www.linked.com www.google.de www.google.fi www.google.no www.google.se *.googletagmanager.com oda.com storage.googleapis.com *.snapchat.com bat.bing.com analytics.pangle-ads.com log.adtraction.fail checkoutshopper-live.cdn.adyen.com ;style-src 'unsafe-inline' 'self' *.oda.com translate.googleapis.com;script-src 'self' 'nonce-NjhlYzA5MmEtOGE5ZS00OTE0LTg5NDYtNDY1NjlhNjM4OTEx' *.oda.com  'sha256-QLN4/tVmbx4rIRUIwpoTvMI9PyCLdP+V6RSDfQMVEfM=' 'sha256-6xYRXGTve/VTSs6Rki/dNOaYbQbQscqyCpbKFoaO/QA=' 'sha256-N4/5hGfx8xkPtfVswEIqYnX0T8THpCSI4Z57gINwoUw=' 'sha256-pp9UFJ03BIMVR5GHQfjyQtsqEXj1PXOGAHmMKwG3Ld0=' js.sentry-cdn.com browser.sentry-cdn.com messenger.dixa.io connect.facebook.net s.pinimg.com ct.pinterest.com www.google.com *.googletagmanager.com www.google-analytics.com ssl.google-analytics.com www.googleadservices.com *.doubleclick.net tpc.googlesyndication.com pagead2.googlesyndication.com snap.licdn.com sc-static.net *.snapchat.com bat.bing.com analytics.tiktok.com gtm.adt313.net tagmanager.google.com polyfill-fastly.io ;connect-src 'self' *.oda.com   *.sentry.io 1teetjp9.apicdn.sanity.io 1teetjp9.api.sanity.io cdn.sanity.io translate.googleapis.com messenger.dixa.io messenger-edge.dixa.io www.facebook.com ct.pinterest.com *.google.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com www.google.de www.google.fi www.google.no pagead2.googlesyndication.com ad.doubleclick.net *.g.doubleclick.net cdn.linkedin.oribi.io px.ads.linkedin.com *.snapchat.com bat.bing.com analytics.tiktok.com analytics.pangle-ads.com bat.bing.com log.adtraction.fail api.mapbox.com events.mapbox.com *.tiles.mapbox.com vimeo.com checkoutshopper-live.adyen.com checkoutshopper-live.cdn.adyen.com ;frame-src 'self' acs.3dsecure.no player.vimeo.com www.youtube.com messenger.dixa.io ct.pinterest.com www.facebook.com *.g.doubleclick.net *.fls.doubleclick.net td.doubleclick.net tpc.googlesyndication.com *.snapchat.com https://www.googletagmanager.com checkoutshopper-live.adyen.com ;frame-ancestors 'self';font-src 'self' *.oda.com;base-uri 'none';object-src 'none';child-src 'self' *.oda.com  blob:;
etag: W/"jqvl80lcc183xb"
x-xss-protection: 0
content-encoding: br
Date: Sun, 09 Nov 2025 05:53:38 GMT
X-Served-By: cache-ams2100136-AMS, cache-ams21069-AMS, cache-tyo11969-TYO
X-Cache: MISS, MISS, MISS
X-Cache-Hits: 0, 0, 0
Vary: Accept-Encoding
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
transfer-encoding: chunked