oda.com Review

 N/A

HTTP/1.1 301 Moved Permanently
Connection: close
Content-Length: 0
Server: Varnish
Retry-After: 0
Location: https://oda.com/
Accept-Ranges: bytes
Date: Sat, 05 Jul 2025 17:33:21 GMT
Via: 1.1 varnish
X-Served-By: cache-tyo11937-TYO
X-Cache: HIT
X-Cache-Hits: 0
X-Timer: S1751736801.385054,VS0,VE0
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

HTTP/1.1 302 Found
Connection: keep-alive
Content-Length: 0
content-type: text/html; charset=utf-8
expires: Thu, 01 Jan 1970 00:00:00 GMT
via: 1.1 varnish, 1.1 varnish, 1.1 varnish
accept-ranges: bytes
location: /no/
cache-control: max-age=0, no-cache, no-store, must-revalidate, private
set-cookie: _sp_ses.2006=*; Domain=.oda.com; expires=Sat, 05 Jul 2025 18:03:21 GMT; Max-Age=1800; Path=/; SameSite=Lax; Secure
set-cookie: _sp_id.2006=16f264ae-e51c-4fb3-939c-8766596558bf.1751736801.1.1751736801..70eeabd0-fc00-445f-856c-da8ca0de63a1; Domain=.oda.com; expires=Sun, 05 Jul 2026 17:33:21 GMT; Max-Age=31536000; Path=/; SameSite=Lax; Secure
set-cookie: sessionid=lrhpkagk17vjwjc7v1gi2bl2a7mdt64e; expires=Mon, 04 Aug 2025 17:33:21 GMT; HttpOnly; Max-Age=2592000; Path=/; SameSite=Lax; Secure
x-timer: S1751736802.544314,VS0,VE61
x-frame-options: SAMEORIGIN
x-xss-protection: 0
Date: Sat, 05 Jul 2025 17:33:21 GMT
X-Served-By: cache-ams2100100-AMS, cache-ams21031-AMS, cache-tyo11962-TYO
X-Cache: MISS, MISS, MISS
X-Cache-Hits: 0, 0, 0
Vary: Cookie
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

HTTP/1.1 200 OK
Connection: keep-alive
set-cookie: _csrfSecret=4Mf8%2FbujIJnH%2Bqwkk0RY0NYp; Path=/; Secure; HttpOnly; SameSite=strict
set-cookie: _sp_id.2006=788a83bf-d5d1-489d-88d1-728223f408d0.1751736802.1.1751736802..cf918748-0765-4ac9-a58f-aae4dbe9a359; Path=/; Expires=Sun, 05 Jul 2026 17:33:22 GMT; Domain=.oda.com; Secure; SameSite=lax
set-cookie: _sp_ses.2006=*; Path=/; Expires=Sat, 05 Jul 2025 18:03:22 GMT; Domain=.oda.com; Secure; SameSite=lax
set-cookie: _d_id=788a83bf-d5d1-489d-88d1-728223f408d0; Path=/; Expires=Sun, 05 Jul 2026 17:33:22 GMT; Domain=.oda.com; Secure; SameSite=lax
x-tienda-web-csrf-token: AAhGdsD7flMjolEy2A4JEBFRCnHbhhS52dwwDgVB
via: 1.1 varnish, 1.1 varnish, 1.1 varnish
etag: W/"16tm2j6h48784up"
accept-ranges: none
x-timer: S1751736802.322089,VS0,VE13
cache-control: private, no-cache, no-store, max-age=0, must-revalidate
content-security-policy: default-src 'self'  *.oda.com;img-src 'self' *.oda.com  blob: data: bilder.kolonial.no cdn.sanity.io *.vimeocdn.com translate.googleapis.com api.mapbox.com ct.pinterest.com log.pinterest.com www.facebook.com connect.facebook.net *.google-analytics.com www.google.no *.google.com *.g.doubleclick.net 11208031.fls.doubleclick.net ad.doubleclick.net pagead2.googlesyndication.com ade.googlesyndication.com *.ads.linkedin.com www.linked.com www.google.de www.google.fi www.google.no www.google.se *.googletagmanager.com oda.com storage.googleapis.com *.snapchat.com bat.bing.com analytics.pangle-ads.com log.adtraction.fail checkoutshopper-live.cdn.adyen.com;style-src 'unsafe-inline' 'self' *.oda.com translate.googleapis.com;script-src 'self' 'unsafe-eval'  *.oda.com  'sha256-QLN4/tVmbx4rIRUIwpoTvMI9PyCLdP+V6RSDfQMVEfM=' 'sha256-6xYRXGTve/VTSs6Rki/dNOaYbQbQscqyCpbKFoaO/QA=' 'sha256-N4/5hGfx8xkPtfVswEIqYnX0T8THpCSI4Z57gINwoUw=' 'sha256-pp9UFJ03BIMVR5GHQfjyQtsqEXj1PXOGAHmMKwG3Ld0=' js.sentry-cdn.com browser.sentry-cdn.com messenger.dixa.io connect.facebook.net s.pinimg.com ct.pinterest.com www.google.com *.googletagmanager.com www.google-analytics.com ssl.google-analytics.com www.googleadservices.com *.doubleclick.net tpc.googlesyndication.com pagead2.googlesyndication.com snap.licdn.com sc-static.net *.snapchat.com bat.bing.com analytics.tiktok.com gtm.adt313.net tagmanager.google.com polyfill-fastly.io;connect-src 'self' *.oda.com   *.sentry.io 1teetjp9.apicdn.sanity.io 1teetjp9.api.sanity.io cdn.sanity.io translate.googleapis.com messenger.dixa.io messenger-edge.dixa.io www.facebook.com ct.pinterest.com *.google.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com www.google.de www.google.fi www.google.no pagead2.googlesyndication.com ad.doubleclick.net *.g.doubleclick.net cdn.linkedin.oribi.io px.ads.linkedin.com *.snapchat.com bat.bing.com analytics.tiktok.com analytics.pangle-ads.com bat.bing.com log.adtraction.fail gtm-sst-se.mathem.se api.mapbox.com events.mapbox.com *.tiles.mapbox.com vimeo.com checkoutshopper-live.adyen.com checkoutshopper-live.cdn.adyen.com;frame-src 'self' acs.3dsecure.no player.vimeo.com www.youtube.com messenger.dixa.io ct.pinterest.com www.facebook.com *.g.doubleclick.net *.fls.doubleclick.net td.doubleclick.net tpc.googlesyndication.com *.snapchat.com https://www.googletagmanager.com checkoutshopper-live.adyen.com;frame-ancestors 'self';font-src 'self' *.oda.com;base-uri 'none';object-src 'none';child-src 'self' *.oda.com  blob:;
x-nextjs-prerender: 1
x-xss-protection: 0
x-nextjs-cache: HIT
content-type: text/html; charset=utf-8
x-content-type-options: nosniff
content-encoding: br
Date: Sat, 05 Jul 2025 17:33:22 GMT
X-Served-By: cache-ams2100084-AMS, cache-ams21069-AMS, cache-tyo11962-TYO
X-Cache: MISS, MISS, MISS
X-Cache-Hits: 0, 0, 0
Vary: Accept-Encoding
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
transfer-encoding: chunked