Is mdtriallawyer.com a legitimate law firm website? After analyzing dozens of signals, we can say the site behind this domain — The Herbst Firm — has a solid technical foundation. The domain was registered in 2010, and archived versions go back even further to 2001, which is rare for a fake site. Google's safe browsing tools found no threats, and the site uses a valid HTTPS certificate from Let's Encrypt with modern encryption. That said, two gaps stand out for a legal practice: there is no dedicated About page with attorney profiles or office address, and the site doesn't have a privacy policy or terms of service. Most established law firms publish both. The homepage itself names the firm and provides a phone number and links to social media profiles on Facebook, X, and LinkedIn. The contact page exists and the phone number appears valid. Our verdict is Mostly Safe — meaning you can probably trust that this is a real law firm, but you should still verify their credentials through the Maryland State Bar Association before engaging their services. If they handle sensitive case details, ask about their privacy practices directly.
In plain English
The Herbst Firm appears to be a real Maryland criminal defense practice with a long-running website and a clean security record. The main concerns are the missing about page and lack of a privacy policy — unusual for a law firm. You can likely work with them, but consider double-checking their credentials through the Maryland State Bar Association before sharing personal information.
Where the score comes from
A valid HTTPS certificate and modern TLS are in place, but the site doesn't set common browser protections like content-security policy or clickjacking prevention. That's a moderate gap for a law firm that handles sensitive inquiries, not a critical flaw.
The domain is 15 years old and clearly names 'The Herbst Firm' on the homepage, but there's no dedicated about page, team profiles, or registered business address. For a legal practice, clients reasonably expect to see who they're hiring.
Clean on all blacklists, no malware flags, and the Wayback Machine shows a web presence stretching back to 2001. It's a well-established site without external red flags.
A phone number, contact page, and links to three social media profiles are present, which is good. But the missing about page and lack of any attorney backgrounds or office address make it harder to fully verify who runs the firm.
No privacy policy or terms of service are published. For a law firm collecting personal data through contact forms, this is a real gap — most legitimate legal sites include these pages as standard practice.
Fast load times, AWS CloudFront CDN, Google-hosted email, and a proper sitemap with 367 pages. The technical setup is solid and reflects ongoing investment.
What we checked
Run this site? Show your score.
Add a trust badge so visitors can see your live score for themselves.
Get your badge →