HTTP Headers for mailchimp.com

Responds with HTTP 200 OK from istio-envoy — 1 of 6 security headers present.

Domain to Check
200 OKhttps://mailchimp.com/
Security Headers1/6
HSTS
CSP
X-Frame-Options
X-Content-Type-Options
Referrer-Policy
Permissions-Policy
All Response Headers (19)
connectionclose
content-encodinggzip
content-length0
content-typetext/html; charset=UTF-8
dateFri, 24 Apr 2026 15:43:08 GMT
intuit_tid1-69eb8ec0-0a89cde2213f635e17e05bcf
serveristio-envoy
server-timingak_p; desc="1777045388591_399280524_410113140_30_11455_1_7_-";dur=1
set-cookiebm_sz=C392BE7D985C646075A5C0DD9BAC231C~YAAQjInMF03Mnb2dAQAAQb0owB+dIXpCmVbECP08I0lLp6omP65kIrAssxjufld5NVuVWQuzkG5bJRdKzwLETktUNPqGI1ca6MW9oFbWPPT44gKxbvZ1m3oihEQn06aI0kSNPtJcHOrk8U/MN8eKfTPhReCDIdxHhXrbTK8Hs+0Lp0G61WXCpGHgUoHktBOGS1fQPZGwQlevrUWt3SoUr8SK/TQbaxJJDZqFlvnw7fcsxxvdsWDKbAZ74brKoxW+wJXxHilIi5iNBZKZUyU9kCDkS1DySloFXfPwDSbzuGrfNp3aSGM82eum3HyNrQFpwEs+xhdNvTEA6CA216jOYpPyTNkgErmm41ChzzEbPIPY~3224901~4337712; Domain=.mailchimp.com; Path=/; Expires=Fri, 24 Apr 2026 19:43:08 GMT; Max-Age=14400
varyAccept-Encoding
x-amzn-trace-idRoot=1-69eb8ec0-0a89cde2213f635e17e05bcf
x-envoy-decorator-operationmailchimp-app-desired-service.mailchimp-monolith-mailchimpapp-use2-prd7.svc.cluster.local:8090/*
x-envoy-upstream-service-time751
x-frame-optionsSAMEORIGIN
x-intuit-upstream-locality-regionus-east-2
x-plums-varyAccept-Encoding, Accept-Language, Cookie
x-request-id1-69eb8ec0-0a89cde2213f635e17e05bcf
x-spanid3ca17e0e-aacb-5754-ee16-fb6b47f22ec7
x-ua-compatibleIE=edge,chrome=1
Related
HTTP Headers for mailchimp.com — istio-envoy | ProfileMyIP