rosen-group.com

HTML metadata

Title

ROSEN – Empowered by technology

Description

For us, technology is the driving force of progress. Progress that secures a more sustainable future for our customers, their assets and for society.

Language

en

Canonical

https://www.rosen-group.com/en

Translations

de
de-ch
de-de
es

Open Graph

url: https://www.rosen-group.com/en
title: ROSEN – Empowered by technology
locale: en
description: For us, technology is the driving force of progress. Progress that secures a more sustainable future for our customers, their assets and for society.

Technology

CDN: Vercel
CMS: Next.js

Third-party hosts loaded (1)

edge-platform.sitecorecloud.io×1

Social

Registration

Registrar

Key-Systems GmbH

Created

2011-11-08

Expires

2026-11-08 172 days left

Updated

2025-12-03

Name servers

ns1.domaindiscount24.net
ns2.domaindiscount24.net
ns3.domaindiscount24.net

DNS records live

NS

ns1.domaindiscount24.net
ns2.domaindiscount24.net
ns3.domaindiscount24.net

MX

10 mxa-001d8c01.gslb.pphosted.com
10 mxb-001d8c01.gslb.pphosted.com

TXT

Show 15 TXT records

docusign=9a8f15d6-10fb-4717-b899-74efbdcad5eb
fRpMa4t89QiAo/F1Z+hr4emIT451K3Lt/UjULSj+ow0=
VNomYhSVayUz2LP+/LflshZpnK9Fo8A5EWqXNpsS38QwA0d5z1Rz0k6Jg9sdBZph+mbsjCILtxFoG0lBCMwonQ==
lovable_verification=5IvL1dOKA293cJBrDnjL
docusign=7218467f-fa63-4f48-b78a-9fea89554165
_globalsign-domain-verification=flJz8MTpfENwdXfJoK3KbkVZ80J61rlZ26fli74ulg
figma-domain-verification=fecc065743d3d28553f766fefdd73a6b7dce05f3f74110a69770de2d2f2fad2b-1713368530
anthropic-domain-verification-kfatrr=ypvRF5VpJeg5UMIk1JPzbf1HG
apple-domain-verification=sgBoTlH9Ovkrdssn
sitecore-domain-verification=f77ada58e6da4e318f4565ad694e6a5e
apple-domain-verification=OhQK58YqGo4umTng
adobe-idp-site-verification=915130a1-fed8-4339-9e97-583cbff39da3
veracityrosen-groupcom=Tuj7oyE89CrtxvF0NwLR4Y8Ro+puBUCDZ2c/rs8679i3Aa3lAk4PxzsYX6XZtieWLq6GxX5UOp086amaRbBw3g==
S/kVQ/a4pZKZZm8P/1OsUTXsVPEZxX3KI3qzqzDnu4P+5LirGWsNk7IciMIUSGB7mmRyrp1JOUaOXz+Wju5fhA==
atlassian-domain-verification=lyduegDoDJGwAeL8Dn62aIQxFGfJweh3LN/o8HfW0p24GLzG2ByTtTBUiSlmURTa

Email authentication strong

SPF

v=spf1 mx ip4:185.102.93.53 ip4:52.188.137.143 ip4:20.42.38.64 include:_spf-dc41.sapsf.com include:spf-001d8c01.pphosted.com -all

strict (-all)

DMARC

v=DMARC1; p=reject; fo=1; rua=mailto:dmarc_rua@emaildefense.proofpoint.com; ruf=mailto:dmarc_ruf@emaildefense.proofpoint.com;

policy: reject (enforced)

DKIM

dkim: v=DKIM1; k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKosBc66IQI0xdBTAZtvljZKxUG39buziTEuhoiD5zXdN068U7jeZ8K8+ZJkAz1p5JCJ2h4zJ…

selectors probed

Certificate (current)

R13

from 2026-05-03 to 2026-08-01

Expires in 74 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 75/100 Checked live page: https://www.rosen-group.com/en

present

strict-transport-security
content-security-policy
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing frame protection
missing Permissions Policy

Header values

referrer-policy: no-referrer-when-downgrade
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' *.usercentrics.eu www.youtube.com www.youtube-nocookie.com *.google.com *.google.de *.google.pl *.googletagmanager.com *.google-analytics.com *.g.doubleclick.net www.googleadservices.com *.licdn.com *.googleapis.com *.gstatic.com *.ggpht.com *.googleusercontent.com blob: connect.facebook.net www.redditstatic.com *.prd.heyflow.com va.vercel-scripts.com https://vercel.live *.sitecorecloud.io *.windows.net; frame-src 'self' *.rosen-group.com *.usercentrics.eu www.youtube.com www.youtube-nocookie.com forms.nintex.com ntx.lv *.googletagmanager.com td.doubleclick.net *.google.com ausbildung.rosen-lingen.de https://vercel.live; child-src 'self' *.rosen-group.com; style-src 'self' 'unsafe-inline' *.sitecorecloud.io fast.fonts.net *.googletagmanager.com *.googleapis.com *.prd.heyflow.com https://fonts.heyflow.cloud https://vercel.live; font-src 'self' data: fonts.gstatic.com https://fonts.heyflow.cloud https://vercel.live https://assets.verc
strict-transport-security: max-age=63072000; includeSubDomains; preload