charleston.co.uk

.uk crawl

First seen 2026-05-27 · Last seen 2026-05-30 · ok HTTP/1.1 200 1061 ms crawled 2026-05-30

GB · 46.32.228.26 · AS20738 Heart Internet limited

Reputation 95/100 weak security headers

Classifying

HTML metadata

Title: Commercial & Residential Mortgage Specialists - Charleston Financial
Description: Charleston are an authorised financial services organisation offering advice on Commercial Mortgages, HMO Mortgages, Buy To Let, Bridging Finance, Secured Loans and Residential Mortgages.
Language: en-GB
Generator: Contao Open Source CMS

Open Graph

url: https://www.charleston.co.uk
title: Commercial & Residential Mortgage Specialists
description: Charleston are an authorised financial services organisation offering advice on Commercial Mortgages, HMO Mortgages, Buy To Let, Bridging Finance, Secured Loans and Residential Mortgages.

Technology

Server: Apache
jQuery: 1.11.3 known XSS (<3.5)
Stack: PHP

Analytics

Google Tag Manager

Fonts

Google Fonts

Third-party hosts loaded (7)

code.jquery.com×1
fonts.googleapis.com×1
js.createsend1.com×1
maxcdn.bootstrapcdn.com×1
userlike-cdn-widgets.s3-eu-west-1.amazonaws.com×1
widget.trustpilot.com×1
www.googletagmanager.com×1

Social

Contact

Phone

+441908972491

DNS records live

NS

ns.heartinternet.uk
ns2.heartinternet.uk

MX

5 charleston-co-uk.mail.protection.outlook.com

Verified for

Microsoft 365

Email authentication strong

SPF

v=spf1 include:spf.protection.outlook.com -all

strict (-all)

DMARC

v=DMARC1; p=quarantine; rua=mailto:dmarc@charleston.co.uk

policy: quarantine

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0+mAKaCmgGxuQm72FulZsuFcqrZOzjZwHl2zg436euIjyrrsJOW9rO0ixhQCJg3H8mWCv3u4VCpo6…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1fn9Xvl0AYdKADMk7wF0Ks4lHo2MDs2adSp9k4Mrgar1maP6CmgHnr0eoD8Xnjs08TPYUr5hI+vOEI…

selectors probed

Certificate (current)

Go Daddy Secure Certificate Authority - G2

from 2026-02-25 to 2027-03-29

Expires in 299 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 30/100 Checked live page: https://www.charleston.co.uk/

findings

missing HSTS
missing Content Security Policy
missing frame protection
missing content type protection
missing Referrer Policy
missing Permissions Policy

Links to (6)

Linked from (1)

pivotal.co.uk×1