Competitor intelligence dossier
themortgagebroker.co.uk
Looking for a trusted mortgage broker? The Mortgage Broker provide independent mortgage advice and access to leading mortgage rates.
60-second brief
What the site appears to sell, how it converts visitors, what is measurable and where the evidence is incomplete.
No matching public ad was verified in the sampled libraries. This does not prove that no campaigns are running.
4 public measurement or advertising signals were observed. Presence does not prove configuration quality or report receipt.
Cloudflare was observed at the public edge and WordPress was fingerprinted as the site platform. The origin host may remain hidden.
Ahrefs Domain Rating is a logarithmic backlink-strength metric. It is not a traffic estimate or a search-position score.
Mobile lab scored 74 out of 100. Lighthouse reported a 11 ms server response in that run.
Commercial read
A cautious interpretation of the public positioning, offers, proof, conversion routes, acquisition signals and content footprint.
Looking for a trusted mortgage broker? The Mortgage Broker provide independent mortgage advice and access to leading mortgage rates.
No distinct offer was confirmed from the sampled headings and routes.
No case-study, testimonial or review proof was confirmed in the bounded sample.
Website form and Click-to-call link were observed. Submission handling and conversion firing were not tested.
LinkedIn, Meta, Google and Google Tag Manager measurement or advertising technology is present. This suggests channel instrumentation, but does not prove that campaigns are active.
5,745 words were found on the sampled homepage. 5 exact-domain pages appeared in the bounded index-presence check.
Prioritised
Up to five practical actions, deduplicated and ordered by likely impact. Open each one for the evidence and verification path.
Implement and test a consent platform appropriate to the site's regions and data uses.
Why it matters: Consent state can determine which storage and requests are permitted. Automated detection is not a legal conclusion.
How to verify: Trace baseline, reject and accept sessions in fresh browser contexts.
Add contextual alternatives to informative images and empty alt text to decorative ones.
Why it matters: Images without an alt attribute can be announced poorly or lose equivalent content for screen-reader users.
How to verify: Review the rendered accessibility tree and screen-reader output.
Confirm auto-renewal, payment method and registrar contacts.
Why it matters: An expired or imminently expiring registration can interrupt every domain service.
How to verify: Check the registrar account and updated RDAP event.
Add meaningful alt text to informative images and empty alt to decorative images.
Why it matters: Alternative text supports accessibility and image understanding.
How to verify: Review each image in context with accessibility tooling.
Address the largest repeatable lab bottlenecks and retest.
Why it matters: A lab score is a controlled diagnostic snapshot, not a real-user outcome.
How to verify: Rerun with the same strategy after changes and compare the underlying audits.
Demand signals
Only strong ad matches are counted. The search sample checks exact-domain index presence; it is not a rankings report.
No matching public ad was verified in the sampled libraries. This does not prove that no campaigns are running.
5 exact-domain pages appeared in a bounded index-presence check. This is not a measure of wider query performance.
Looking for a trusted mortgage broker? The Mortgage Broker provide independent mortgage advice and access to leading mortgage rates.
themortgagebroker.co.ukMortgage advice from leading UK experts. From straightforward mortgages to more complex needs, get clear guidance and access to competitive rates.
themortgagebroker.co.uk › mortgagesCompare 23,000+ Mortgage Rates, and Access over 100 Mortgage Lenders. Award Winning Mortgage Advice // Same Day Decision in Principles!
themortgagebroker.co.uk › contact-usGet your free Mortgage in Principle (AIP/DIP) in 15 minutes, with no effect on your credit score. We access 130+ lenders and 25,000+ rates to get the best deal.
themortgagebroker.co.uk › mortgage-in-principleGet to know your helpers Our team are the face of our company and, as such, we ensure that all our employees maintain the highest of standards. With specialists across the financial lending market, including remortgaging, first time buyers, buy-to-let and property portfolios; along with all protection and insurance needs; our team are here to support your every need.
themortgagebroker.co.uk › meet-the-teamSpeed and experience
Lighthouse is a one-off lab test. CrUX is 28-day real-user data and may be unavailable on lower-traffic sites.
Mobile lab scored 74 out of 100. Lighthouse reported a 11 ms server response in that run.
Controlled Lighthouse lab result.
Controlled Lighthouse lab result.
Public real-user field data was returned.
ObservedCore Web Vitals are LCP, INP and CLS measured from real users at the 75th percentile. Lighthouse is a synthetic test: it can diagnose LCP and CLS, while TBT is only a laboratory proxy for responsiveness and is not INP.
At least one published real-user profile is poor. Lighthouse remains a diagnostic snapshot, not the field verdict.
A one-off Lighthouse diagnostic. A score of 90 or higher is considered good, but it is not a real-user Core Web Vitals verdict.
Remove unused styles, split page-specific CSS and load non-critical styles after the first render. Estimated lab saving: up to 600 ms · 78.5 KB.
Open the Lighthouse diagnostic, address the largest estimated saving first, then rerun the same page and device profile. Estimated lab saving: 6.2 KB.
Source: Google PageSpeed Insights / Lighthouse · Profile: mobile · Tested: 25 October 2026 at 10:29 UTC · Lighthouse 13.5.0 · tested page
A one-off Lighthouse diagnostic. A score of 90 or higher is considered good, but it is not a real-user Core Web Vitals verdict.
Remove unused styles, split page-specific CSS and load non-critical styles after the first render. Estimated lab saving: up to 80 ms · 78 KB.
Open the Lighthouse diagnostic, address the largest estimated saving first, then rerun the same page and device profile. Estimated lab saving: up to 40 ms · 6.2 KB.
Source: Google PageSpeed Insights / Lighthouse · Profile: desktop · Tested: 25 October 2026 at 10:29 UTC · Lighthouse 13.5.0 · tested page
75th-percentile Chrome experience · whole origin · 26 Sept 2026 to 23 Oct 2026.
No Core Web Vitals fix is indicated by this public sample. Keep monitoring because the rolling 28-day result changes over time.
Source: Chrome UX Report API · CrUX eligibility methodology
75th-percentile Chrome experience · whole origin · 26 Sept 2026 to 23 Oct 2026.
Improve CLS by reserving space for images, adverts and embeds, and avoiding late content insertion above existing content.
Source: Chrome UX Report API · CrUX eligibility methodology
Remove unused styles, split page-specific CSS and load non-critical styles after the first render. Estimated lab saving: up to 600 ms · 78.5 KB.
Remove unused styles, split page-specific CSS and load non-critical styles after the first render. Estimated lab saving: up to 80 ms · 78 KB.
Open the Lighthouse diagnostic, address the largest estimated saving first, then rerun the same page and device profile. Estimated lab saving: up to 40 ms · 6.2 KB.
Improve CLS by reserving dimensions for images, adverts and embeds, and avoiding late content insertion above existing content. Lighthouse rates this poor in the current lab run.
Receipts
The supporting stack, measurement, infrastructure, reputation and raw collection modules. Kept compact until you need it.
Insight Tag · Meta Pixel · Google tag, GA4, Ads or Floodlight · Google reCAPTCHA · Cloudflare
Insight Tag · Meta Pixel · Google tag / GA4 · Google Tag Manager
Cloudflare was observed at the edge. The origin hosting provider may be hidden behind it.
source tag or inline script · 2 signals · view sampled page
source tag or inline script · 2 signals · view sampled page
source tag or inline script · 3 signals · view sampled page
source tag or inline script · 3 signals · view sampled page
source tag or inline script · 3 signals · view sampled page
source tag or inline script · 3 signals · view sampled page
published Google Tag Manager container · 1 signal · view sampled page
source tag or inline script · 1 signal · view sampled page
source tag or inline script · 1 signal · view sampled page
No match is not a safety guarantee. Investigate any warning independently.
Open any card to inspect the public evidence, source and collection details.
910.3 KB of public HTML inspected
HTTP 200 · 545.1 KB · 28 ms · view sampled page
HTTP 200 · 365.2 KB · 26 ms · view sampled page
128 browser requests observed before interaction
HTTP 200 · 62 requests · 3 third-party hosts · view sampled page
HTTP 200 · 66 requests · 3 third-party hosts · view sampled page
Fresh browser context; no forms or logins submitted
Insight Tag · Meta Pixel · Google tag, GA4, Ads or Floodlight
Insight Tag · Advertising · 100% confidence
Meta Pixel · Advertising · 100% confidence
Google tag, GA4, Ads or Floodlight · Analytics and data · 100% confidence
Google reCAPTCHA · Bot protection · 95% confidence
Cloudflare · CDN and edge · 100% confidence
WordPress · CMS · 95% confidence
Cloudflare DNS · DNS provider · 100% confidence
Font Awesome · Icon library · 95% confidence
4 addresses · 2 nameservers · 1 mail routes
Domain: themortgagebroker.co.uk
A: 2 records
AAAA: 2 records
NS: 2 records
MX: 1 record
TXT: 4 records
SOA: 1 record
Email policy: SPF present · DMARC present
Registration currently expires 30 Nov 2026
Registrar: ICUK Computing Services Ltd (ICUK)
Registered: 30 Nov 2004
Expires: 30 Nov 2026
Nameservers: alexis.ns.cloudflare.com, megan.ns.cloudflare.com
Registry RDAP via the IANA bootstrap · https://rdap.nominet.uk/uk/domain/themortgagebroker.co.uk
104.16.150.108
Address: 104.16.150.108
Edge detection confidence: high
Cloudflare was observed at the edge. The origin hosting provider may be hidden behind it.
Mobile Lighthouse performance
FCP: 3.2 s
LCP: 4.9 s
CLS: 0
TBT: 0 ms
Mobile real-user Core Web Vitals: Passes · origin scope
Desktop real-user Core Web Vitals: Poor · origin scope
Top lab opportunity: Reduce unused CSS · up to 600 ms · 78.5 KB
No current Google Web Risk match
Google Web Risk: no current match
Reputation data is a provider snapshot, not a warranty that a site is safe. Timestamps and coverage matter.
Backlink profile strength on a logarithmic 0-100 scale. It is not a Google ranking or traffic metric.
Target domain: themortgagebroker.co.uk
Domain Rating by Ahrefs · https://ahrefs.com/
Scale: 0–100 · logarithmic
robots.txt found · 1 sitemap declaration
robots.txt · 483 B · view sampled page
User-agent directives: present
Declared sitemap · view sampled page
XML index · 1.1 KB
No file returned from the standard public location
Checked /.well-known/security.txt · view sampled page
Absence is informational and is not a vulnerability by itself
16 priority findings · 96% scored evidence coverage
Deterministic ruleset 0.1.0
Report generated: 25 October 2026 at 10:29 UTC
Rules produced 16 prioritised findings
No supported consent interface was identified in the fresh pre-consent browser state. This is not proof that the site has no banner: region, timing, prior-state logic and unsupported CMPs can change the result.
Suggested fix: Implement and test a consent platform appropriate to the site's regions and data uses.
Why it matters: Consent state can determine which storage and requests are permitted. Automated detection is not a legal conclusion.
How to verify: Trace baseline, reject and accept sessions in fresh browser contexts.
438 image elements were inspected. Empty alt text is counted separately from a missing attribute.
Suggested fix: Add contextual alternatives to informative images and empty alt text to decorative ones.
Why it matters: Images without an alt attribute can be announced poorly or lose equivalent content for screen-reader users.
How to verify: Review the rendered accessibility tree and screen-reader output.
Registry RDAP published an expiration event for themortgagebroker.co.uk.
Suggested fix: Confirm auto-renewal, payment method and registrar contacts.
Why it matters: An expired or imminently expiring registration can interrupt every domain service.
How to verify: Check the registrar account and updated RDAP event.
The current automated score is 80 out of 100.
Suggested fix: Review the failed automated audits, then complete manual keyboard and assistive-technology testing.
Why it matters: A lab score is a controlled diagnostic snapshot, not a real-user outcome.
How to verify: Rerun with the same strategy after changes and compare the underlying audits.
The current automated score is 74 out of 100.
Suggested fix: Improve the largest Lighthouse opportunities, then rerun the same mobile test.
Why it matters: A lab score is a controlled diagnostic snapshot, not a real-user outcome.
How to verify: Rerun with the same strategy after changes and compare the underlying audits.
The header was absent from the sampled final HTML response.
Suggested fix: Add a tested Content-Security-Policy. Start in report-only mode if necessary.
Why it matters: CSP can limit the impact of injected content.
How to verify: Inspect the final response headers after deployment.
The current automated score is 74 out of 100.
Suggested fix: Address the largest repeatable lab bottlenecks and retest.
Why it matters: A lab score is a controlled diagnostic snapshot, not a real-user outcome.
How to verify: Rerun with the same strategy after changes and compare the underlying audits.
The header was absent from the sampled final HTML response.
Suggested fix: Add a suitable Strict-Transport-Security policy after confirming every subdomain is HTTPS-ready.
Why it matters: HSTS tells supporting browsers to keep using HTTPS.
How to verify: Inspect the final response headers after deployment.
438 image elements were inspected in source HTML.
Suggested fix: Add meaningful alt text to informative images and empty alt to decorative images.
Why it matters: Alternative text supports accessibility and image understanding.
How to verify: Review each image in context with accessibility tooling.
H2 to H4, H2 to H4, H2 to H4, H3 to H6, H2 to H4
Suggested fix: Use headings to represent nested document structure, not visual size.
Why it matters: A logical heading outline helps keyboard and screen-reader navigation.
How to verify: Inspect the rendered heading outline.
The bounded uncompressed response body contained 558151 bytes.
Suggested fix: Remove unused markup and inline payloads; keep critical content concise.
Why it matters: Large HTML delays parsing and can contain unnecessary page data.
How to verify: Compare transferred and decoded document sizes after the change.
The header was absent from the sampled final HTML response.
Suggested fix: Set X-Content-Type-Options: nosniff.
Why it matters: X-Content-Type-Options reduces MIME confusion.
How to verify: Inspect the final response headers after deployment.
No frame-embedding restriction was observed
Suggested fix: Set CSP frame-ancestors or X-Frame-Options where legacy support is needed.
Why it matters: Clickjacking protection reduces unwanted framing.
How to verify: Repeat the same public check after the change.
The header was absent from the sampled final HTML response.
Suggested fix: Set a restrictive Permissions-Policy for unused browser capabilities.
Why it matters: Permissions-Policy limits access to powerful browser features.
How to verify: Inspect the final response headers after deployment.
The header was absent from the sampled final HTML response.
Suggested fix: Set an explicit Referrer-Policy appropriate to the site.
Why it matters: A referrer policy limits URL information sent to other origins.
How to verify: Inspect the final response headers after deployment.
No DS record was returned. This does not test every resolver or validate the complete chain.
Suggested fix: Consider enabling DNSSEC with coordinated registrar and DNS-provider configuration.
Why it matters: DNSSEC can provide origin authentication for DNS answers when the validation chain is correct.
How to verify: Validate the complete chain with an independent DNSSEC tool.
Bounded analysis of publicly accessible pages, DNS, registries and configured providers. No login, form submission, port scan or exploit testing.