indexo.dev

workmatters.ie

.ie crawl

First seen 2026-06-01 · Last seen 2026-06-01 · ok HTTP/1.1 200 6526 ms crawled 2026-06-02

US · 104.21.53.65 · AS13335 Cloudflare, Inc.

Reputation 89/100 weak security headers dmarc monitor-only

Classifying

HTML metadata

Title
Home - WorkMatters
Language
en-GB
Generator
Site Kit by Google 1.159.0
Canonical
https://workmatters.ie/
Feeds

Open Graph

url
https://workmatters.ie/
title
Home - WorkMatters
locale
en_GB
site name
WorkMatters

Technology

CDN
Cloudflare
CMS
WordPress
PHP
8.2.31 security-only
jQuery
3.7.1
Analytics
  • Google Tag Manager
Fonts
  • Google Fonts

Third-party hosts loaded (5)

  • fonts.googleapis.com×3
  • www.googletagmanager.com×3
  • cdn.jsdelivr.net×2
  • js.stripe.com×2
  • www.google.com×1

Social

Contact

Phone

DNS records live

NS
  • austin.ns.cloudflare.com
  • dahlia.ns.cloudflare.com
MX
  • 10 workmatters-ie.mail.protection.outlook.com
Verified for
  • Google
  • Microsoft 365

Email authentication partial

SPF
v=spf1 include:spf.protection.outlook.com include:mailgun.org include:sendgrid.net include:_spf.esperto.one include:26790049.spf02.hubspotemail.net -all
strict (-all)
DMARC
v=DMARC1; p=none; ruf=mailto:devs@engagebay.com
policy: none (monitoring only)
DKIM
  • s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3sireXjWVcTIMj2ccKaIZLkiFsGkTrcjjcQBtYDpqAk1xFXFtnG6l94iP72H5qZQ6yIJ2R2BeTZ1uPH5n1…
  • s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDI0hyeadT0WFxoXKN+wmbxkFnt0cu46tUzDHfG7V4gwhuB7+Lzzs+yckv0JeHe1IGfFGPv7/KqSstP4Lydhzdr9b…
selectors probed

Certificate (current)

WE1
from 2026-04-23 to 2026-07-22
Expires in 49 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 40/100 Checked live page: https://workmatters.ie/

present
  • content-security-policy
findings
  • missing HSTS
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
  • missing frame protection
  • missing content type protection
  • missing Referrer Policy
  • missing Permissions Policy
Header values
content-security-policy
script-src * 'self' 'unsafe-inline' 'unsafe-eval' wistia.com youtube.com blob:

Links to (9)

Linked from (1)