acorngroup.co.uk

HTML metadata

Title

South East London & North Kent Estate Agents | Acorn Estate Agents

Description

Looking for professional south east London estate agents who understand your needs? We are Londons largest multi-brand estate agency. For the top estate agents or property specialists, contact us.

Language

en-GB

Generator

Starberry CMS

Feeds

RSS 2.0 RSS
Atom 1.0 Atom

Technology

Server: Apache
CMS: Joomla

Analytics

Google Tag Manager

Cookie consent

OneTrust

Social widgets

Vimeo Embed

Third-party hosts loaded (6)

acorngroup.bambooauctions.com×1
cdn-ukwest.onetrust.com×1
cht-srvc.net×1
player.vimeo.com×1
www.facebook.com×1
www.googletagmanager.com×1

Social

Contact

Address: 1 Sherman Road, BR1 3JH, Bromley, Kent, United Kingdom

Registration

Registrar

123-Reg Limited t/a 123-reg

Created

2001-02-06

Expires

2027-02-06 261 days left

Updated

2026-01-19

Name servers

ns65.domaincontrol.com.
ns66.domaincontrol.com.

DNS records live

NS

ns65.domaincontrol.com
ns66.domaincontrol.com

MX

0 acorngroup-co-uk.mail.protection.outlook.com

TXT

b147mu7dhpb493nirfmhnv231c

Verified for

GlobalSign
Google
Microsoft 365

Email authentication strong

SPF

v=spf1 include:_u.acorngroup.co.uk._spf.smart.ondmarc.com ~all

softfail (~all)

DMARC

v=DMARC1; p=reject; pct=100; fo=1; ri=3600; rua=mailto:2ba62bc7@inbox.ondmarc.com; ruf=mailto:2ba62bc7@inbox.ondmarc.com;

policy: reject (enforced)

DKIM

Show 4 DKIM selectors

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDr1IdPXvFKFBNu1VMYT72PvNWL9bPJ4aRzFtZRXzmEBbXdy1Qy3+ajrnzMBcjWvIGrdYeDvKJp9uF…
k1: k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbNrX2cY/GUKIFx2G/1I00ftdAj713WP9AQ1xir85i89sA2guU0ta4UX1Xzm06XIU6iBP41VwmPwBGRNofhBVR+e6WHUo…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnp+uIRribKjlMUPDndyvdDIv+a/S4m1KN59cZp7AZ5FJfbFXhjqbULpAR4VqcY1iWDaBSWoxZ55vmq78G…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQClIQv+LIJ864ktFunZXdlutNYePAUPiOR+ho6EhEwPOJPdEcNEmUrK/WGKcSnWhck6b7Ru96SkPAyJnla9ClxmiA…

selectors probed

Certificate (current)

Go Daddy Secure Certificate Authority - G2

from 2026-01-02 to 2027-02-03

Expires in 259 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.acorngroup.co.uk/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: same-origin
x-frame-options: SAMEORIGIN
permissions-policy: microphone geolocation=* 'none'; payment 'none'; sync-xhr 'self' https://*.starberry.com http://*.starberry.com https://www.acorngroup.co.uk
x-content-type-options: nosniff
content-security-policy: default-src 'self' blob: www.google-analytics.com https://*.hubspot.com https://services.postcodeanywhere.co.uk stats.g.doubleclick.net; script-src 'self' 'unsafe-inline' https://security.acaboom.co.uk https://*.hscollectedforms.net https://*.hs-scripts.com https://js-eu1.hubspot.com https://app-eu1.hubspot.com https://js-eu1.hs-banner.com https://js-eu1.hs-analytics.net https://*.onetrust.com https://vimeo.com https://js.hs-banner.com https://js.hubspot.com https://universe-static.elfsightcdn.com/ https://js.hs-scripts.com/ https://js.hs-analytics.net https://js.hs-banner.com https://*.clarity.ms https://api.livechatinc.com https://www.freeprivacypolicy.com https://cloud.clients.property https://vimeo.com https://cht-srvc.net https://cdn.livechatinc.com https://inform.dataloft.co.uk https://apis.google.com https://i.ytimg.com https://www.youtube.com https://optimize.google.com https://www.googleanalytics.com https://www.google-analytics.com https://www.googleoptimize.com www.locratin
strict-transport-security: max-age=63072000; includeSubdomains; preload