repak.ie

HTML metadata

Title: Repak: Ireland’s leading environmental not for profit organisation
Language: en
Canonical: https://repak.ie/

Technology

Server: Apache

Analytics

Google Tag Manager

Fonts

Adobe Fonts
Google Fonts

Third-party hosts loaded (7)

fonts.googleapis.com×5
fonts.gstatic.com×2
cdnjs.cloudflare.com×1
cookie-cdn.cookiepro.com×1
use.typekit.net×1
www.google.com×1
www.googletagmanager.com×1

Social

Contact

Email

Phone

+35314670190

Address

Red Cow Interchange Estate1 Ballymount Road,Clondalkin,Dublin 22, D22 HW67

DNS records live

NS

ns0.reg365.net
ns1.reg365.net
ns2.reg365.net

MX

10 d313943.a.ess.de.barracudanetworks.com
20 d313943.b.ess.de.barracudanetworks.com

TXT

rp62l4rgr35xyshpgsw3r450mwy1t52w
CDDF9CB1536EF668EC70BBC96FBDF3453722DEC09F54CD6AA47313314206387F

Verified for

Google
Microsoft 365

Email authentication partial

SPF

v=spf1 -a mx ip4:83.147.148.66 ip4:3.248.96.25  include:spf.protection.outlook.com include:spf.ess.de.barracudanetworks.com include:spf.reg365.net -all

strict (-all)

DMARC

v=DMARC1; p=none; rua=mailto:DMARC@repak.ie; ruf=mailto:DMARC@repak.ie; fo=1;

policy: none (monitoring only)

DKIM

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCpv4geK0CvBbQiZXlzQfXvhBwAUV1ICnFqAQhkdB9wY8bY/zXQJpBAUVQtZR54PPkvAF7yf1mucyv1bAZI+q…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1dQdMpWj8dY5GYRP4mPsWTmu0T9j1Vd/EkyKdZRVLO1vBWdWpCRThFcbxKLbWjC4gNRoYvVttfCKV…

selectors probed

Certificate (current)

DigiCert Global G2 TLS RSA SHA256 2020 CA1

from 2026-03-23 to 2026-10-08

Expires in 129 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://repak.ie/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
weak content type protection

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: accelerometer=(), autoplay=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()
x-content-type-options: nosniff, nosniff
content-security-policy: default-src 'self'; script-src 'unsafe-inline' 'unsafe-eval' 'self' blob: https://widget.storepoint.co/ https://*.jquery.com/ https://*.webspellchecker.net/ https://*.googleapis.com/ https://*.cloudflare.com/ https://*.cookiepro.com/ https://*.clarity.ms/ https://*.google-analytics.com/ https://*.google.com/ https://*.googletagmanager.com/ https://*.gstatic.com/; style-src 'unsafe-inline' 'self' https://*.storepoint.co/ https://fonts.googleapis.com/ https://p.typekit.net/ https://use.typekit.net/; object-src 'none'; base-uri 'self'; connect-src 'self' https://*.doubleclick.net/ https://vod-adaptive-ak.vimeocdn.com/ https://*.vimeo.com/ https://*.mapbox.com/ https://*.storepoint.co/ https://*.expressionengine.com/ https://*.google.ie/ https://*.cookiepro.com/ https://*.clarity.ms/ https://*.analytics.google.com/ https://*.google.com/ https://*.googleadservices.com/ https://*.googletagmanager.com/; font-src 'self' data: https://*.storepoint.co/ https://fonts.gstatic.com/ https://use.type
strict-transport-security: max-age=63072000; includeSubdomains; preload, max-age=31536000; includeSubDomains; preload