indexo.dev

wetreu.de

.de crawl

First seen 2026-06-03 · Last seen 2026-06-04 · ok HTTP/1.1 200 1671 ms crawled 2026-06-04

DE · 159.69.143.80 · AS24940 Hetzner Online GmbH

Reputation 100/100

Classifying

HTML metadata

Title
wetreu: Steuerberatung persönlich & individuell | Bestens beraten | wetreu
Description
Mit über 800 Mitarbeitenden an mehr als 50 Standorten behalten wir Ihre Steuersituation im Blick – kompetent, individuell und persönlich. Maßgeschneiderte Lösungen für Ihre Zukunft.
Language
de
Generator
Drupal 11 (https://www.drupal.org)

Technology

Server
Apache
CMS
Drupal

Social

Contact

Email
Phone

Registration

Updated
2026-03-31
Name servers
  • ns1.ennit.net.
  • ns2.ennit.net.

DNS records live

NS
  • ns1.ennit.net
  • ns2.ennit.net
MX
  • 10 wetreu.in.tmes.trendmicro.eu
TXT
  • tmes=b48fd98f61785ed9dd9eabd4ae809332
Verified for
  • Apple
  • Cisco
  • Google
  • Microsoft 365

Email authentication strong

SPF
v=spf1 mx ip4:62.159.103.83 ip4:62.159.103.90 include:agenturserver.de include:spf.protection.outlook.com include:spf.tmes.trendmicro.com include:_spf.rexx-suite.com -all
strict (-all)
DMARC
v=DMARC1;p=quarantine;sp=quarantine;rua=mailto:wetreu@dmarcrua.tmes.trendmicro.eu;ruf=mailto:wetreu@dmarcrua.tmes.trendmicro.eu;pct=100;ri=86400;aspf=r;adkim=r;fo=0:1
policy: quarantine · sp=quarantine
DKIM
no key found at common selectors

Certificate (current)

Sectigo Public Server Authentication CA DV R36
from 2025-08-25 to 2026-09-26
Expires in 113 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.wetreu.de/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • referrer-policy
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
  • missing Permissions Policy
Header values
referrer-policy
strict-origin-when-cross-origin
x-frame-options
SAMEORIGIN
x-content-type-options
nosniff
content-security-policy
default-src 'none'; connect-src 'self' wss: www.google.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com www.googleadservices.com ad.doubleclick.net www.facebook.com googleads.g.doubleclick.net www.google.de px.ads.linkedin.com https://www.google-analytics.com https://www.googletagmanager.com; font-src 'self' data: fonts.gstatic.com; frame-src 'self' *.google-analytics.com *.analytics.google.com *.googletagmanager.com connect.facebook.net *.fls.doubleclick.net https://auth.pw6.de; img-src 'self' data: www.google.com www.google.de googleads.g.doubleclick.net ad.doubleclick.net www.facebook.com fonts.gstatic.com *.ads.linkedin.com https://www.google-analytics.com https://www.googletagmanager.com; media-src 'self'; script-src 'self' 'unsafe-inline' *.google-analytics.com *.analytics.google.com *.googletagmanager.com connect.facebook.net snap.licdn.com; style-src 'self' 'unsafe-inline' www.googletagmanager.com fonts.googleapis.com
strict-transport-security
max-age=31536000

Links to (2)

Linked from (1)