Unclassified // For public releaseWordle · Official security dossier

Looking for more in-depth information on this company—or any company worldwide? Visit companyforensics.org.

Automatic security check · Public OSINT only

Company website

https://mailchimp.com/de/

64%

Caution advised

Mixed public signals. Review missing headers, domain age, and independent reputation before trusting it. Passive OSINT only · inventKeys=false.

  1. High concern
  2. Elevated risk
  3. Caution advised
  4. Trusted — verify
  5. Strong protections

mailchimp.com security check

Public OSINT valuation for mailchimp.com: grade C (64/100). Title signal “Die E-Mail-Marketing-Plattform, jetzt mit SMS | Mailchimp”. 2 security headers present, 6 commonly expected headers missing. This is a defensive surface review — not a penetration test.

64
/100
Grade C
Caution advised

Mixed public signals. Review missing headers, domain age, and independent reputation before trusting it.

Checked 2026-11-02T15:49:30Z · Method: automated passive checks · No attacks, no exploits

Company website · Services · Social

Company website

https://mailchimp.com/de/

Services & products

Social & LinkedIn

  • No social or LinkedIn company links found on the scanned pages.

Links are extracted from public crawl HTML only. We never invent profiles or product pages.

Research engines · Complete scan

This complete report delivers web-check-class passive modules to customers — DNS, TLS, headers, mail auth, archives, CT logs and more — researched in the spirit of Lissy93/web-check. Port scan, traceroute and Shodan stay off by policy. Run a live check on the security-check tool for the full interactive dashboard.

Connect this report to your website

Add a free badge that links visitors to this official Wordle security report. You get referral traffic and a backlink; customers can verify the dossier.

Open this public report

Trustpilot · Glassdoor

Trustpilot

—

Official Trustpilot signals only — never scraped. Shown when a public Business Unit profile exists (inventKeys=false).

Open Trustpilot for mailchimp.com ↗

Glassdoor

—

No Glassdoor scrape. Search the official employer directory when no linked profile is present.

Search Glassdoor ↗

Hosting · IP · map

  • IP23.36.156.29
  • ASNAS16625
  • HostingAkamai International, BV
  • GeoFrankfurt am Main, Hessen, Germany
  1. Query
    mailchimp.comRequested hostname
  2. IP
    23.36.156.29Frankfurt am Main, Hessen, Germany
  3. ASN
    AS16625Akamai International, BV
  4. Trace
    ICMP traceroute off by policyPassive IP path only · inventKeys=false

Sources: DNS · ipwho.is geolocation · OpenStreetMap embed. Soft-fail if geo blocked · inventKeys=false.

Domain registration · business age

RegistrarMarkMonitor Inc.
Registered2001-06-29
Domain age25 years 4 mo
Registry / location.com registry (RDAP)

Public RDAP / WHOIS only. Soft-fail when WHOIS is blocked — we never invent registrar or age.

How we scored mailchimp.com

Positive signals

  • TLS handshake OK (TLSv1.3).
  • HTTP Strict Transport Security is present.
  • DNS resolves publicly (A/AAAA).
  • security.txt found (coordinated disclosure signal).
  • robots.txt is publicly available.
  • RDAP domain record available (mailchimp.com).

Risk signals

  • Content-Security-Policy not observed.
  • X-Content-Type-Options missing.
  • Set-Cookie present but Secure/HttpOnly incomplete on sampled header.

Findings

Technical details

DNS

resolved
A
23.36.156.29
AAAA
—
PTR
a23-36-156-29.deploy.static.akamaitechnologies.com
error
—

TLS / certificate

ok
version
TLSv1.3
cipher
TLS_AES_256_GCM_SHA384
issuer
DigiCert Inc
notAfter
Jan 16 23:59:59 2027 GMT
SAN sample
mailchimp.com
error
—

HTTP & security headers

2 present
finalUrl
https://mailchimp.com/de/
status
200
server
istio-envoy
x-powered-by
—
present
strict-transport-security, x-frame-options
missing
content-security-policy, x-content-type-options, referrer-policy, permissions-policy, cross-origin-opener-policy, cross-origin-resource-policy
cookie Secure
False
cookie HttpOnly
False

Tech fingerprint (public)

passive
title
Die E-Mail-Marketing-Plattform, jetzt mit SMS | Mailchimp
generator
—
tech
React, WordPress, Google Analytics
script hosts
mailchimp.com, accounts.google.com, cdn.optimizely.com, x
description
Steigere dein Wachstum mit den zeitsparenden Marketing-Tools von Mailchimp. Starte deine 14-tägige kostenlose Testphase.

RDAP / registration

rdap
domain
mailchimp.com
registrar
MarkMonitor Inc.
created
2001-06-29T22:51:45Z
expires
2029-06-29T22:51:44Z
nameservers
a1-205.akam.net, a14-66.akam.net, a4-65.akam.net, a5-65.akam.net, a6-66.akam.net, a7-66.akam.net
status
client delete prohibited, client transfer prohibited, client update prohibited, server delete prohibited, server transfer prohibited, server update prohibited
error
—

Public well-known

passive
/.well-known/security.txt
HTTP 200 · found
/robots.txt
HTTP 200 · found
/security.txt
HTTP 200 · found
Analyzed 2026-11-02T15:49:30Z WORDLE passive OSINT (DNS/TLS/HTTP/RDAP/well-known) — no exploits More recent checks

looking for more information about this company or any company in the world? -Contact http://companyforensics.org

This service was brought to you by http://dotsynergygroup.com