oda.com Review

 N/A

HTTP/1.1 301 Moved Permanently
Connection: close
Content-Length: 0
Server: Varnish
Retry-After: 0
Location: https://oda.com/
Accept-Ranges: bytes
Date: Tue, 16 Sep 2025 09:15:57 GMT
Via: 1.1 varnish
X-Served-By: cache-tyo11960-TYO
X-Cache: HIT
X-Cache-Hits: 0
X-Timer: S1758014158.748762,VS0,VE0
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

HTTP/1.1 302 Found
Connection: keep-alive
Content-Length: 0
via: 1.1 varnish, 1.1 varnish, 1.1 varnish
set-cookie: _sp_ses.2006=*; Domain=.oda.com; expires=Tue, 16 Sep 2025 09:45:57 GMT; Max-Age=1800; Path=/; SameSite=Lax; Secure
set-cookie: _sp_id.2006=022f8125-b3b9-4d46-b8f8-c810339f61e5.1758014157.1.1758014157..a11f0855-8ff4-4f0e-9446-4ac4c48d0a51; Domain=.oda.com; expires=Wed, 16 Sep 2026 09:15:57 GMT; Max-Age=31536000; Path=/; SameSite=Lax; Secure
set-cookie: sessionid=55dkr5jglw42z8f5szn9ttzqj4lneuf3; expires=Thu, 16 Oct 2025 09:15:57 GMT; HttpOnly; Max-Age=2592000; Path=/; SameSite=Lax; Secure
cache-control: max-age=0, no-cache, no-store, must-revalidate, private
accept-ranges: bytes
x-frame-options: SAMEORIGIN
x-xss-protection: 0
expires: Thu, 01 Jan 1970 00:00:00 GMT
x-timer: S1758014158.911350,VS0,VE48
location: /no/
content-type: text/html; charset=utf-8
Date: Tue, 16 Sep 2025 09:15:58 GMT
X-Served-By: cache-ams21075-AMS, cache-ams21031-AMS, cache-tyo11977-TYO
X-Cache: MISS, MISS, MISS
X-Cache-Hits: 0, 0, 0
Vary: Cookie
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

HTTP/1.1 200 OK
Connection: keep-alive
via: 1.1 varnish, 1.1 varnish, 1.1 varnish
set-cookie: _csrfSecret=8i2xDqH63ez4JoZ5RYM%2F1B4E; Path=/; Secure; HttpOnly; SameSite=strict
set-cookie: _sp_id.2006=6258d41c-e634-4e4e-b878-bd1a74cece26.1758014158.1.1758014158..62006f96-4234-4112-a691-ccea69718eba; Path=/; Expires=Wed, 16 Sep 2026 09:15:58 GMT; Domain=.oda.com; Secure; SameSite=lax
set-cookie: _sp_ses.2006=*; Path=/; Expires=Tue, 16 Sep 2025 09:45:58 GMT; Domain=.oda.com; Secure; SameSite=lax
set-cookie: _d_id=6258d41c-e634-4e4e-b878-bd1a74cece26; Path=/; Expires=Wed, 16 Sep 2026 09:15:58 GMT; Domain=.oda.com; Secure; SameSite=lax
cache-control: private, no-cache, no-store, max-age=0, must-revalidate
accept-ranges: none
etag: W/"161ejc6gjvg7ry3"
content-security-policy: default-src 'self'  *.oda.com;img-src 'self' *.oda.com  blob: data: bilder.kolonial.no images.oda.com cdn.sanity.io *.vimeocdn.com translate.googleapis.com api.mapbox.com ct.pinterest.com log.pinterest.com www.facebook.com connect.facebook.net *.google-analytics.com www.google.no *.google.com *.g.doubleclick.net 11208031.fls.doubleclick.net ad.doubleclick.net pagead2.googlesyndication.com ade.googlesyndication.com *.ads.linkedin.com www.linked.com www.google.de www.google.fi www.google.no www.google.se *.googletagmanager.com oda.com storage.googleapis.com *.snapchat.com bat.bing.com analytics.pangle-ads.com log.adtraction.fail checkoutshopper-live.cdn.adyen.com;style-src 'unsafe-inline' 'self' *.oda.com translate.googleapis.com;script-src 'self' 'unsafe-eval'  *.oda.com  'sha256-QLN4/tVmbx4rIRUIwpoTvMI9PyCLdP+V6RSDfQMVEfM=' 'sha256-6xYRXGTve/VTSs6Rki/dNOaYbQbQscqyCpbKFoaO/QA=' 'sha256-N4/5hGfx8xkPtfVswEIqYnX0T8THpCSI4Z57gINwoUw=' 'sha256-pp9UFJ03BIMVR5GHQfjyQtsqEXj1PXOGAHmMKwG3Ld0=' js.sentry-cdn.com browser.sentry-cdn.com messenger.dixa.io connect.facebook.net s.pinimg.com ct.pinterest.com www.google.com *.googletagmanager.com www.google-analytics.com ssl.google-analytics.com www.googleadservices.com *.doubleclick.net tpc.googlesyndication.com pagead2.googlesyndication.com snap.licdn.com sc-static.net *.snapchat.com bat.bing.com analytics.tiktok.com gtm.adt313.net tagmanager.google.com polyfill-fastly.io;connect-src 'self' *.oda.com   *.sentry.io 1teetjp9.apicdn.sanity.io 1teetjp9.api.sanity.io cdn.sanity.io translate.googleapis.com messenger.dixa.io messenger-edge.dixa.io www.facebook.com ct.pinterest.com *.google.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com www.google.de www.google.fi www.google.no pagead2.googlesyndication.com ad.doubleclick.net *.g.doubleclick.net cdn.linkedin.oribi.io px.ads.linkedin.com *.snapchat.com bat.bing.com analytics.tiktok.com analytics.pangle-ads.com bat.bing.com log.adtraction.fail gtm-sst-se.mathem.se api.mapbox.com events.mapbox.com *.tiles.mapbox.com vimeo.com checkoutshopper-live.adyen.com checkoutshopper-live.cdn.adyen.com;frame-src 'self' acs.3dsecure.no player.vimeo.com www.youtube.com messenger.dixa.io ct.pinterest.com www.facebook.com *.g.doubleclick.net *.fls.doubleclick.net td.doubleclick.net tpc.googlesyndication.com *.snapchat.com https://www.googletagmanager.com checkoutshopper-live.adyen.com;frame-ancestors 'self';font-src 'self' *.oda.com;base-uri 'none';object-src 'none';child-src 'self' *.oda.com  blob:;
x-xss-protection: 0
x-content-type-options: nosniff
x-timer: S1758014158.205873,VS0,VE17
x-nextjs-cache: HIT
content-type: text/html; charset=utf-8
x-tienda-web-csrf-token: AAgFiJ0rrxsPz06mvq7nhzXV9YReTI+XggJXIHiq
content-encoding: br
Date: Tue, 16 Sep 2025 09:15:58 GMT
X-Served-By: cache-ams2100102-AMS, cache-ams21069-AMS, cache-tyo11977-TYO
X-Cache: MISS, MISS, MISS
X-Cache-Hits: 0, 0, 0
Vary: Accept-Encoding
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
transfer-encoding: chunked