rgei.com

HTML metadata

Title

RGE (Royal Golden Eagle) Group | Sustainable Resources | Raja Garuda Emas

Description

Previously Raja Garuda Mas, founded by Sukanto Tanoto in 1973. RGE Group manages a group of world-class companies in resource-based manufacturing industries.

Language

en-gb

Canonical

https://www.rgei.com/

Feeds

RSS 2.0 RSS
Atom 1.0 Atom

Technology

CDN: Amazon CloudFront
CMS: WordPress

Analytics

Google Tag Manager

Fonts

Google Fonts

Social widgets

YouTube Embed

Third-party hosts loaded (6)

www.inside-rge.com×10
app-script.monsido.com×1
apps.elfsight.com×1
fonts.googleapis.com×1
www.googletagmanager.com×1
www.youtube.com×1

Social

Registration

Registrar

CSC Corporate Domains, Inc.

Created

2000-05-20

Expires

2027-05-20 350 days left

Updated

2026-05-16

Name servers

dns1.cscdns.net
dns2.cscdns.net

DNS records live

NS

dns1.cscdns.net
dns2.cscdns.net

MX

10 mxa-009cad01.gslb.pphosted.com
20 mxb-009cad01.gslb.pphosted.com

TXT

Show 7 TXT records

adobe-sign-verification=292e8dd7524fedf9c287b1e88c2eb7bc
tcyr29b174w161bgw90hqtw7sx2dr8kv
MS=9E21BD04D8959369E36A575938E38DDCA5C63A42
fmnzrkhwxdbg3nsntqcgjsblkvw09rbx
/JqvQqJUh91soxyhCFj57DnpsE5DmmxukP+g0bBYb0TSoTINQjI1RdsM7jKAku14ZEAxpC8srS33Rg8ssZxhpg==
l840wy1mtbff1h485fnzx0lckv54qd43
tlmtj0s4b75qpr6kn81n7gr7wvqttw0s

Verified for

Apple
Atlassian
DocuSign
GlobalSign
Google
Microsoft 365

Email authentication partial

SPF: v=spf1 mx include:spfa.rgei.com include:spfb.rgei.com include:spf.protection.outlook.com -all
strict (-all)
DMARC: v=DMARC1; p=none; fo=1; rua=mailto:DMARC-Agg@rgei.com,mailto:dmarc_rua@emaildefense.proofpoint.com; ruf=mailto:DMARC-rpt@rgei.com,mailto:dmarc_ruf@emaildefense.proofpoint.com
policy: none (monitoring only)
DKIM: no key found at common selectors

Certificate (current)

R12

from 2026-05-12 to 2026-08-10

Expires in 68 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 70/100 Checked live page: https://www.rgei.com/

present

strict-transport-security
content-security-policy
x-content-type-options

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing frame protection
missing Referrer Policy
missing Permissions Policy

Header values

x-content-type-options: nosniff
content-security-policy: default-src 'self' gap:; script-src 'self' data: *.licdn.com *.sharethis.com *.elfsight.com *.monsido.com *.googleapis.com *.twitter.com *.fontawesome.com *.doubleclick.net *.facebook.net *.googleadservices.com *.addtoany.com *.google-analytics.com https://ssl.google-analytics.com https://tagmanager.google.com *.googletagmanager.com *.gstatic.com *.google.com *.recaptcha.net *.instagram.com *.linkedin.com *.youtube.com *.cloudflare.com 'unsafe-inline' 'unsafe-eval'; frame-src data: *.googletagmanager.com *.sharethis.com *.rgei.com *.doubleclick.net *.addtoany.com *.google.com *.recaptcha.net *.twitter.com *.linkedin.com *.facebook.com *.instagram.com *.youtube.com 'unsafe-inline' 'unsafe-eval'; object-src *; style-src 'self' data: *.typekit.net *.googletagmanager.com https://tagmanager.google.com https://fonts.googleapis.com *.googleapis.com *.fontawesome.com 'unsafe-inline'; img-src 'self' data: https://www.google-analytics.com *.googletagmanager.com https://ssl.gstatic.com *.gstatic.
strict-transport-security: max-age=15768000; includeSubDomains; preload