wipfli.com

HTML metadata

Title: Wipfli | Audit, Tax, Advisory
Description: Wipfli delivers integrated tax, assurance, risk, digital, outsourcing and people solutions that help businesses thrive in the modern marketplace.
Language: en
Canonical: https://www.wipfli.com/

Open Graph

url: https://www.wipfli.com/
title: Wipfli LLP | Assurance, Accounting, Tax and Consulting Solutions
locale: en_US
site name: Wipfli

Technology

CDN: Azure Front Door

Analytics

Google Tag Manager

Fonts

Google Fonts

Third-party hosts loaded (12)

cdnjs.cloudflare.com×3
code.jquery.com×2
unpkg.com×2
cdn.jsdelivr.net×1
cdn.optimizely.com×1
dc.ads.linkedin.com×1
fonts.googleapis.com×1
fonts.gstatic.com×1
s.usea01.idio.episerver.net×1
www.facebook.com×1
www.google.com×1
www.googletagmanager.com×1

Social

Contact

Address: 10000 Innovation Drive, Suite 250, 53226, Milwaukee, WI, US

Registration

Registrar

Network Solutions, LLC

Created

1997-04-18

Expires

2034-04-19 2892 days left

Updated

2024-04-19

Name servers

ns1-06.azure-dns.com
ns2-06.azure-dns.net
ns3-06.azure-dns.org
ns4-06.azure-dns.info

DNS records live

NS

ns1-06.azure-dns.com
ns2-06.azure-dns.net
ns3-06.azure-dns.org
ns4-06.azure-dns.info

MX

2 wipfli-com.mail.protection.outlook.com

TXT

Show 25 TXT records

_dj16apsxssq2zpdbjsug7kqzh7cv9gy
paloaltonetworks-site-verification=ff5acd0d2e99e2a9b57157dd99b8201e86100f43f53ce909cf53f0bdb9412c3a
msfpkey=4yyjm5yfrx65rv77gl92erjt4
facebook-domain-verification=4tfzv43pc8njikq8da1cq02fpqexne
d365mktkey=56mfn4i4e6eatemwaw6cwhiwo
globalsign-domain-verification=0318636A1FC67008C2CEA3E7DED4ECA7
d365mktkey=qVNGs9iDGlGXkY06o17QaF7pkTz5ty3oZqZxbWZhARcx
adobe-sign-verification=fa614bfc2aab25e75609216d9e2ba2f1
d365mktkey=YWPySHe99ch3XaqKPmwAH8KU6wDXVLNd4EQ9YKdd6DIx
d365mktkey=boAuO1IDrxFCy4Rb2uR7LVLV8Q702nmgZpHbHflPho4x
apple-domain-verification=DlFcapBIS409eTXr
ecostruxure-it-verification=7cd52a73-2564-487b-aba0-ef325c45c165
logmein-verification-code=c55219bc-43e7-485e-bdea-4c3d77f34c93
thebrief-domain-verification=62df5c20-6678-4485-947e-411702fdee69
globalsign-domain-verification=DC8977AEA22C788CE1EBFE1D2F7F1C9F
d365mktkey=UdexB5ExZHVHkZgUYC1WxXsCgfGJOcyQcxB05kBRUhQx
d365mktkey=235c3ekoic1o4yxswbh5g921j
google-site-verification=LNPh7vh9yXlghmA-zKhkri9VZ25gNhiH9IJ52o_O6xg
anthropic-domain-verification-pvebdt=TTMHP8nkfdJPSgvp3jHxt10Uy
smartsheet-site-validation=gFpq59j5ynBcz9oxGSOxSe_bTVYJsim6
zoho-verification=zb34426497.zmverify.zoho.in
d365mktkey=1o1lycnjgh6lracl7gh3215cy
d365mktkey=xfOgongM5xiI2x93NzVmDT57xPWR2GAhxxnFlxYjdoYx
intacct-esk=13FE5E0A4C808B6FE0635B06690A48B7
d365mktkey=ujxSMBUzVXX77sZrXLsH73Oxm77ey7fXF6dPIR9pOYwx

Email authentication strong

SPF

v=spf1 include:%{i}._ip.%{h}._ehlo.%{d}._spf.vali.email include:spf.protection.outlook.com include:uswestemail.verintefm.com -all

strict (-all)

DMARC

v=DMARC1; p=reject; sp=quarantine; rua=mailto:dmarc_agg@vali.email

policy: reject (enforced) · sp=quarantine

DKIM

Show 4 DKIM selectors

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPoBVTcICTnGiH10El9g/iXFwLLnDoyth9TxK5UmhTKZv0zGr0443i2+kvaFNOf9/kQ5JN5x7nIX+y…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1nIk8amhmw37iqq0NEpuDmMpVbCbmV+iuJNwWYvRs67I35/1ChcsXzJEWkNU4ZZpWzspD61bjUdFM0TI3+…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDE9Zb2wVVqh0WXgporTNBAf6LE6CO9fF8HnxIwit4n3Yj4MajX+xa2WFUYodzMwEAXGZlTpezr22DeX4YeFN7vfY…
smtpapi: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDPtW5iwpXVPiH5FzJ7Nrl8USzuY9zqqzjE0D1r04xDN6qwziDnmgcFNNfMewVKN2D1O+2J9N14hRprzByFwf…

selectors probed

Certificate (current)

DigiCert Global G2 TLS RSA SHA256 2020 CA1

from 2025-10-31 to 2026-11-18

Expires in 183 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 95/100 Checked live page: https://www.wipfli.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP uses wildcard sources

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: camera=(), microphone=()
x-content-type-options: nosniff
content-security-policy: default-src 'self'; font-src 'self' https: data:; img-src 'self' https: data: https://ib.adnxs.com https://action.dstillery.com *.optimizely.com ; media-src 'self' https: data: blob:; child-src 'self' https: blob:; connect-src 'self' *.bigmarker.com *.paypal.com *.dynamics.com *.w3.org *.getgo.com *.bizzabo.com *.pheedloop.com *.bugsnag.com *.microsoft.com https://unpkg.com https://cxppusa1formui01cdnsa01-endpoint.azureedge.net *.wipfli.com google.com *.google.com *.geolocation.onetrust.com *.onetrust.com *.linkedin.oribi.io *.oribi.io *.adroll.com *.clickdimensions.com *.cookielaw.org *.cloudflare.com *.facebook.net *.facebook.com *.googleapis.com *.typekit.net *.gstatic.com *.doubleclick.net *.twimg.com *.linkedin.com *.crazyegg.com *.licdn.com *.twitter.com *.google-analytics.com *.google.co.in *.googleadservices.com *.googletagmanager.com *.gstatic.com https://ml314.com *.company-target.com *.demandbase.com *.6sc.co *.ceros.com *.zi-scripts.com *.zoominfo.com *.clarity.ms https://
strict-transport-security: max-age=31536000; includeSubDomains; preload