precisemortgages.co.uk

.uk crawl

First seen 2026-04-27 · Last seen 2026-05-17 · ok HTTP/1.1 200 1206 ms crawled 2026-05-04

US · 104.19.241.4 · AS13335 Cloudflare, Inc.

Reputation 100/100

Classifying

HTML metadata

Title: Specialist lender for residential and bridging | Precise
Description: As a specialist lender, we offer straightforward residential mortgages and bridging finance. Find out more about our mortgages without the faff.
Language: en

Technology

CDN: Cloudflare

Analytics

Google Tag Manager

Cookie consent

OneTrust

Third-party hosts loaded (3)

cdn-ukwest.onetrust.com×2
widget.trustpilot.com×1
www.googletagmanager.com×1

Social

Registration

Registrar

CSC Corporate Domains, Inc

Created

2009-10-13

Expires

2026-10-13 146 days left

Updated

2025-10-09

Name servers

kara.ns.cloudflare.com.
noah.ns.cloudflare.com.

DNS records live

NS

kara.ns.cloudflare.com
noah.ns.cloudflare.com

MX

10 eu-smtp-inbound-1.mimecast.com
10 eu-smtp-inbound-2.mimecast.com

TXT

Show 4 TXT records

knowbe4-site-verification=6ff646d3f514c3094bc15f4ca45eef1c
v=spf1 include:eu._netblocks.mimecast.com include:25146468.spf08.hubspotemail.net ~all
5kQenvu+odj2jB1rPB9Rs2f5/eKQHtpZyMGp0RUE9+a1KTumsIB3UE+JXnlPBHelgU1ddwo+oGbwUVgemegBGQ==
F97PD64IN8

Verified for

Atlassian
Cisco
Microsoft 365

Certificate (current)

WE1

from 2026-04-20 to 2026-07-19

Expires in 60 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.precisemortgages.co.uk/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: sameorigin
x-content-type-options: nosniff
content-security-policy: default-src 'self' https://magiclickapim.osbgroup.co.uk *.hubspot.com *.bing.com *.hscollectedforms.net *.hs-analytics.net *.hs-banner.com *.usemessages.com *.linkedin.com *.google.com www.google-analytics.com *.clarity.ms *.visualwebsiteoptimizer.com *.doubleclick.net *.onetrust.com https://*.umbraco.com *.trustpilot.com www.gravatar.com player.vimeo.com *.vimeocdn.com packages.umbraco.org our.umbraco.org; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: *.hsforms.net *.bing.com *.hubspot.com www.google-analytics.com *.hscollectedforms.net *.hs-analytics.net *.hs-banner.com *.usemessages.com *.trustpilot.com *.onetrust.com www.googletagmanager.com *.doubleclick.net *.clarity.ms js-eu1.hs-scripts.com *.visualwebsiteoptimizer.com snap.licdn.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: www.googletagmanager.com *.google.co.uk *.google.com *.bing.com *.visualwebsiteoptimizer.com *.hsforms.com *.hubspot.com *.hsforms.net *.clarity.ms *.linkedin.com *.onetrust.com https:/
strict-transport-security: max-age=63072000; includeSubDomains; preload