Website Compliance Hardening — Krumbein Consumer Legal Services
Website Compliance Hardening — Krumbein Consumer Legal Services
No critical exposures. Both high-risk items and every medium item are resolved and confirmed across all 306 pages. Two content matters remain for the firm to confirm — noted on page 4.
Legal trolls do not read websites — they run scanners. Image-copyright crawlers, the German Google-Fonts letter mills, ADA serial-plaintiff firms, and TCPA claimants all find their targets automatically and file off whatever the scan returns, indifferent to intent. The review below points that same scan at the firm's own site first, so nothing is left for them to find. What was open is now closed; what was already right is confirmed.
The pages loaded their typefaces from Google's servers, which hands every visitor's IP address to a third party before consent — the exact trigger a German court ruling turned into a paid demand-letter wave (Munich, 3 O 17493/20).
The two families are downloaded and served from the site itself (43 font files, local @font-face). Zero requests to fonts.googleapis.com remain across all 306 pages.
The contact form collected a phone number with no consent language. A call or text to that number afterward is a TCPA claim worth $500–$1,500 per message.
An unchecked, required checkbox now captures express written consent — automated calls/texts, "not a condition of representation," message-and-data-rates, and reply-STOP opt-out — with the Privacy Policy linked in the same statement.
Lead forms need an affirmative, unchecked acknowledgment and a privacy link inside the form itself, not merely a footer link.
Both are present in the contact form and required before it will submit.
Pages referencing platform names (Google, Instagram) without a disclaimer invite a needless affiliation or trademark complaint.
A site-wide footer line now states those marks belong to their owners and that Krumbein Consumer Legal Services is independent and unaffiliated.
Two search fields suppressed the keyboard focus ring, a WCAG 2.4.7 flag that ADA serial-plaintiff firms scan for.
A site-wide :focus-visible outline now renders a clear ring for keyboard users, with no change to mouse behavior.
Privacy Policy, Terms of Use, Accessibility Statement and Disclaimer are all published and footer-linked, and the site already carries the required attorney-advertising language — "Attorney advertising," "Prior results do not guarantee a similar outcome," and "not legal advice."
Practice images are AI-generated; the 154 Virginia locality photos are Wikimedia Commons images, each self-hosted and credited on the same page with author and license. No copyright-troll exposure was found.
The homepage shows star ratings and review markup. The FTC's 2024 review rule and Virginia Bar Rule 7.1 require these to be genuine and attributable to real clients — a content matter, not a code fix.
A few interior pages skip a heading level, and a named personal inbox is published where a role inbox (e.g. intake@) would draw fewer automated letters. Neither is blocking.
| Status | Ref | Item | Was |
|---|---|---|---|
| Resolved | B1 | Google Fonts self-hosted | High |
| Resolved | E1 | TCPA consent on phone intake | High |
| Resolved | E2 | Form consent + privacy link | Medium |
| Resolved | G1 | Trademark disclaimer | Medium |
| Resolved | F11 | Visible keyboard focus ring | Medium |
| Pass | D1–4 | Privacy, Terms, Accessibility, Disclaimer | — |
| Pass | A | Imagery self-hosted & credited | — |
| Advisory | G4 | Confirm testimonials are real | Content |
| Advisory | F7/H4 | Heading order · role inbox (non-blocking) | Low |
krumbeinlaw.com clears the pre-publish legal-hardening gate — no critical or open high-risk exposure. The one item only the firm can settle is whether the homepage testimonials are genuine and attributable; confirm that, and the site is clean end to end.