trowers.com

HTML metadata

Title: Home | Trowers & Hamlins law firm
Description: Trowers & Hamlins is an international law firm with over 170 partners and more than 1000 people located across the UK, Middle East and Asia.
Language: en
Canonical: https://www.trowers.com/

Open Graph

url: https://www.trowers.com/

Technology

CDN: Azure Front Door

Analytics

Google Tag Manager

Third-party hosts loaded (3)

www.googletagmanager.com×2
ajax.googleapis.com×1
cdn.yoshki.com×1

Social

Registration

Registrar

Tucows Domains Inc.

Created

1997-04-29

Expires

2027-04-30 346 days left

Updated

2026-04-01

Name servers

dns0.star.co.uk
dns1.star.co.uk

DNS records live

NS

dns0.star.co.uk
dns1.star.co.uk

MX

10 eu-smtp-inbound-1.mimecast.com
10 eu-smtp-inbound-2.mimecast.com

TXT

Show 8 TXT records

google-site-verification=IMfu7rfBkPwejakNp0EgyS0EN0kf9xeDeJRfQh6Xyzc
apple-domain-verification=uoFQZwOq4NXxbIdI
uqouNoS2tsLdINqMb+CnwhMe9OKdhj/cIWrZ7ustdedl+bO7NLFQDWqARkEHGjoPlxe2gMapMTfVKbN+hduqVg==
ZOOM_verify_Hc5w7kRPiYbjdYjYqMZW0c
MS=AAF8E39906FCE50262D2AA94309E64D026371F60
trowersprod-cd.azurewebsites.net
_wq24jtnyt71c1widlslkpw6n1hj1ffb
smartsheet-site-validation=gDZMdF4NOLToaYajkV3CkdBg2875AU6y

Email authentication strong

SPF

v=spf1 include:_netblocks.mimecast.com ~all

softfail (~all)

DMARC

v=DMARC1; p=quarantine; rua=mailto:14085ac9be65869@rep.dmarcanalyzer.com; ruf=mailto:14085ac9be65869@for.dmarcanalyzer.com; pct=100; fo=1;

policy: quarantine

DKIM

s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxA12SCWO7/99plVkpLRa6FhcTdX35WF09IchSYr/F+hLusbDGwJfWP2/IGQoEK15IDCenEtAfzHRZ5jibi…
s2: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1IVRvFBZSGqlb7M9XaO7Wxg9CeuxFezycqu13Qqb9QcJLMJn0sQTIPxIAKdwLS5l1BjKod1ZNKm8yFJUJT…

selectors probed

Certificate (current)

GeoTrust TLS RSA CA G1

from 2025-11-03 to 2026-12-02

Expires in 197 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.trowers.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: no-referrer-when-downgrade
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self' trowers.com www.trowers.com *.cookiebot.com *.crazyegg.com; style-src 'self' 'unsafe-inline' trowers.com www.trowers.com sites-trowers.vuturevx.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' www.instagram.com trowers.com www.trowers.com cdn.jsdelivr.net *.cookiebot.com www.googletagmanager.com *.google-analytics.com *.crazyegg.com blob: app.bryter.io *.commoninja.com *.clarity.ms sites-trowers.vuturevx.com; frame-src 'self' www.instagram.com trowers.com www.trowers.com embed.podcasts.apple.com *.cookiebot.com www.youtube.com player.vimeo.com trowers.bryter.io w.soundcloud.com cdn.yoshki.com *.crazyegg.com sites-trowers.vuturevx.com td.doubleclick.net open.spotify.com forms.office.com *.commoninja.com; connect-src 'self' trowers.com www.trowers.com region1.google-analytics.com region1.analytics.google.com m.addthis.com www.google-analytics.com *.crazyegg.com *.cookiebot.com *.commoninja.com *.clarity.ms; img-src 'self' data: trowers.vuturevx.com trowers
strict-transport-security: max-age=31536000