irwinmitchell.com

HTML metadata

Title: Irwin Mitchell Solicitors, Personal & Business Lawyers & Legal Services
Description: At Irwin Mitchell, you’ll find legal experts who take the time to listen, understand what matters most, and guide you with clear, practical advice from day one.
Language: en
Canonical: https://www.irwinmitchell.com/

Open Graph

url: https://www.irwinmitchell.com/
admins: 123456789
app id: 987654321
itemid: e9abafa1377c4577a4199a3a8044d435
site name: Irwin Mitchell

Technology

CDN: Vercel
CMS: Next.js

Analytics

Google Tag Manager

Cookie consent

Cookiebot

Third-party hosts loaded (8)

cdn.yoshki.com×2
edge.sitecorecloud.io×2
consent.cookiebot.com×1
oc-cdn-public-gbr.azureedge.net×1
script.infinity-tracking.com×1
widget.trustpilot.com×1
www.googletagmanager.com×1
www.gstatic.com×1

Social

Contact

Phone

Registration

Registrar

Ascio Technologies, Inc. Danmark - Filial af Ascio technologies, Inc. USA

Created

1999-03-16

Expires

2027-03-16 301 days left

Updated

2026-03-17

Name servers

a1-60.akam.net
a2-65.akam.net

DNS records live

NS

a1-60.akam.net
a2-65.akam.net
a22-66.akam.net
a28-67.akam.net
a5-64.akam.net
a7-65.akam.net

MX

10 irwinmitchell-com.mail.protection.outlook.com

TXT

Show 17 TXT records

canva-site-verification=pQS_68fJFgGysSV4235czQ
t2blclgpjswv444x18sjz7kk5qbg8gg2
figma-domain-verification=b590c21e255b86144df9ae3e0590fb2c62a2b772210b09d62a6e6738ac217c9e-1753099726
_oitv54frsn4pob8zkgspt4rlvqybr60
google-site-verification=TduBpqG9mTSWc-CQxVh7SbFayvc15tTP5KgcZwkbwF4
have-i-been-pwned-verification=7a60320050f40e4b780fb2d881b990cc
sitecore-domain-verification=1bb8885025ed4bdb9b9e52dc1032ec08
onetrust-domain-verification=68ddc2b179314c648085afcb37a2679b
jwbplbltfpftlck302995b111923100m
apple-domain-verification=uYJlc3nfZgZI3Nug
_rgqfeolac1xs0eb79ymvk8g5wmkzzf0
MS=ms14096139
NbLGNgCKWaPXnX8M9xqh9JtQrk+JU76Qq6jWFqTDpUVbgEAbcAxPDz/fiwoecJThdSRHCD0DPogWY0DvLo7G8Q==
_bftwbf6t2r2m5uk6d5gx1niyx56omfy
mms5zsjvnptpyrs5lqh3cg09m4jcg6ms
ibmid=82986427-5bc2-48c5-8532-0b6277846e2c
docusign=6b31efa0-7d95-40a2-bfd5-cee2552a2af4

Email authentication strong

SPF

v=spf1 include:spf.protection.outlook.com include:_spf-uk.echoworx.com include:spfa.cpmails.com include:theaccessgroupSPF.smtp.com ip4:51.141.230.108 ip4:51.140.39.192 ip4:51.140.36.48 ip4:51.140.39.0 ip4:51.140.37.134 ip4:51.140.113.75 ip4:51.11.148.72 ip4:51.11.148.69 ip4:51.11.148.64 ip4:51.11.148.62 ip4:52.151.65.245 ip4:20.108.110.231 ip4:20.108.109.89 ip4:20.108.107.182 ip4:20.117.223.26 ip4:85.210.139.104 ip4:172.165.144.38 ip4:172.165.145.167 ip4:172.165.145.165 ip4:172.165.145.150 ip4:172.165.145.136 ip4:172.165.145.129 ip4:195.11.116.190 ip4:195.11.116.165 ip4:195.11.116.164 ip4:195.11.116.158 ip4:195.11.116.133 ip4:195.11.116.132 ip4:167.89.25.72 ip4:167.89.21.56 ip4:167.89.22.247 ip4:167.89.22.100 ip4:167.89.100.46 ip4:212.54.130.143 ip4:51.140.113.75 ip4:51.140.120.61 ip4:51.140.113.131 ip4:51.140.118.134 ip4:51.140.126.252 ip4:51.140.61.84 ip4:52.151.95.45 ip4:51.140.92.145 ip4:51.141.230.108 ip4:51.140.122.226 ip4:51.105.74.165 ~all

softfail (~all)

DMARC

v=DMARC1; p=reject; rua=mailto:dmarc_agg@emailfraudprotect.email,mailto:dmarc@irwinmitchell.com; ruf=mailto:dmarcforensics@irwinmitchell.com; fo=s; ri=21600

policy: reject (enforced)

DKIM

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCkNJ/g5aRCDaHFg8vaOsZkd6I3TpZp3HGHkQAAFF9JkWpGokaRfL9aTgSk3zLmAVcm21LIbEP+sSvgru4IBJ…
selector2: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCThA8eOQBqL7tA6GuBI+M1JuhYGSTc3XFVD/plJNimxVkv5+CwGhn+3iJTdB46tXSE4bXJqc9kR0asM6dCgF…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraRTJJDih/C8bmWGikJu5My8bX0DEdDju49a8U4+DrPY5+Fz/EF9lkbJ5TU7h8ubAnPSijbuQA1f1Sjeos…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC0mi3u1e8j32NBAMLrT+GXWmuUewuqqXUVhTLIC7KeXiRr7orVhEsMzPu+Lj7omx0yhonY7pi6gbqZNclqyAMooD…

selectors probed

Certificate (current)

DigiCert Global G3 TLS ECC SHA384 2020 CA1

from 2026-01-22 to 2027-01-23

Expires in 249 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.irwinmitchell.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
cross-origin-opener-policy
cross-origin-embedder-policy
cross-origin-resource-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'self' ; script-src-elem 'self' 'unsafe-inline' *.azureedge.net *.cookiebot.com *.googletagmanager.com *.infinity-tracking.com *.google.com *.cloudfront.net *.gstatic.com *.doubleclick.net *.infinity-tracking.net *.trustpilot.com *.googleapis.com *.fortawesome.com *.google-analytics.com *.visualwebsiteoptimizer.com *.jquery.com *.jsdelivr.net *.liveperson.net *.facebook.net *.adsrvr.org *.adnxs.com *.licdn.com *.quantserve.com *.bing.com *.quantcount.com *.lpsnmedia.net *.passle.net *.googlesyndication.com *.google.co.uk *.the-ozone-project.com; style-src 'self' 'unsafe-inline' *.googleapis.com *.azureedge.net *.fortawesome.com *.irwinmitchell.com *.googletagmanager.com *.google.co.uk; img-src 'self' data: https: *.the-ozone-project.com; font-src 'self' data: fonts.gstatic.com; connect-src 'self' *.sitecorecloud.io *.events.data.microsoft.com *.infinity-tracking.com *.cookiebot.com *.google.com *.trustpilot.com *.googleapis.com *.bing.com *.quantserve.
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy: same-origin
cross-origin-embedder-policy: unsafe-none
cross-origin-resource-policy: cross-origin