rosa.be

Connection: keep-alive
Date: Thu, 04 Jun 2026 16:39:57 GMT
location: /en/
Content-Security-Policy: report-to default;connect-src 'self' https://prod-api.rosa.be wss://prod-api.rosa.be analytics-mp.rosa.be  http://localhost:3000 https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com *.awswaf.com;script-src-attr 'unsafe-inline';script-src 'self' 'unsafe-eval' 'unsafe-inline' https://script.hotjar.com https://static.hotjar.com *.awswaf.com;script-src-elem 'self' 'unsafe-eval' *.awswaf.com;font-src 'self' 'unsafe-inline' https://script.hotjar.com https://fonts.gstatic.com;style-src 'self' https://static.hotjar.com https://script.hotjar.com https://fonts.googleapis.com/ 'unsafe-inline';frame-src https://*.hotjar.com;img-src 'self' data: *.rosa.be https://s3.eu-central-1.amazonaws.com mt0.google.com mt1.google.com mt2.google.com mt3.google.com https://static.hotjar.com https://script.hotjar.com;default-src 'self';base-uri 'self';form-action 'self';frame-ancestors 'self';object-src 'none';upgrade-insecure-requests
Cross-Origin-Embedder-Policy: credentialless
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
X-DNS-Prefetch-Control: off
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=15552000; includeSubDomains
X-Download-Options: noopen
X-Content-Type-Options: nosniff
Origin-Agent-Cluster: ?1
X-Permitted-Cross-Domain-Policies: none
Referrer-Policy: no-referrer
X-XSS-Protection: 0
report-to: {"group":"wizard","max_age":10886400,"endpoints":[{"url":"https://rosa.report-uri.com/a/d/g/wizard"}],"include_subdomains":true},{"group":"default","max_age":10886400,"endpoints":[{"url":"https://rosa.report-uri.com/a/d/g"}],"include_subdomains":true}
NEL: {"report_to":"default","max_age":31536000,"include_subdomains":true, "failure_fraction":0.01}
cache-control: no-store
X-Cache: Miss from cloudfront
Via: 1.1 5d1844c0587174aadaf5fcb877084596.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: HEL51-P7
X-Amz-Cf-Id: HP7tY5SPc1Mn_XZCm4RZAhBCpRAtcfTTQBe2CslpEsAKUQDd3gV34A==