amnesty.org

HTML metadata

Title

Amnesty International

Description

We are a global movement of more than 10 million people in over 150 countries who campaign campaign for a world where human rights are enjoyed by all.

Language

en

Canonical

https://www.amnesty.org/en/

Translations

ar
en
es
fr
ru-ru
zh-hans-cn
zh-hant

Feeds

Open Graph

url: https://www.amnesty.org/en/
title: Amnesty International
locale: en
site name: Amnesty International
description: We campaign for a world where human rights are enjoyed by all

Technology

CDN: Cloudflare
CMS: WordPress

Analytics

Google Tag Manager

Third-party hosts loaded (3)

cc.cdn.civiccomputing.com×2
js.stripe.com×2
www.googletagmanager.com×2

Social

Registration

Registrar

Network Solutions, LLC

Created

1992-11-20

Expires

2027-11-19 548 days left

Updated

2024-09-27

Name servers

ns-1178.awsdns-19.org
ns-1837.awsdns-37.co.uk
ns-470.awsdns-58.com
ns-597.awsdns-10.net

DNS records live

NS

ns-1178.awsdns-19.org
ns-1837.awsdns-37.co.uk
ns-470.awsdns-58.com
ns-597.awsdns-10.net

MX

0 amnesty-org.mail.protection.outlook.com

TXT

Show 4 TXT records

ZOOM_verify_jjfeYeiShMfqUek1AEFPTM
apple-domain-verification=IPplswRGbxVOGG2O
facebook-domain-verification=2aii639wnjz9r4g26gl2078donjz0z
include:sendgrid.net

Email authentication partial

SPF

v=spf1 ip4:94.236.83.186 ip4:217.156.236.250 ip4:195.234.175.0/24 include:servers.mcsv.net include:_spf.google.com include:spf.protection.outlook.com include:spf.eventsforce.net include:_spf.newzapp.co.uk ~all

softfail (~all)

DMARC

v=DMARC1; p=none; pct=100; rua=mailto:dnsadmin@amnesty.org; ruf=mailto:dnsadmin@amnesty.org; fo=1

policy: none (monitoring only)

DKIM

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDYCQEkcVu//miGhk2MLGapvXTZ8pOD7aZE6br4PupNWtt06SyEIbbxai0bC6GDLf6MbUap7p6ceE8Hj9qjQ0…

selectors probed

Certificate (current)

WE1

from 2026-03-23 to 2026-06-21

Expires in 33 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 95/100 Checked live page: https://www.amnesty.org/en/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP uses wildcard sources

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: accelerometer=(self "https://www.youtube-nocookie.com" "https://www.youtube.com" "https://youtu.be"), encrypted-media=(self "https://www.youtube-nocookie.com" "https://www.youtube.com" "https://youtu.be"), fullscreen=(self "https://www.youtube-nocookie.com" "https://www.youtube.com" "https://youtu.be" "https://viewer.mapme.com"), gyroscope=(self "https://www.youtube-nocookie.com" "https://www.youtube.com" "https://youtu.be"), picture-in-picture=(self "https://www.youtube-nocookie.com" "https://www.youtube.com" "https://youtu.be"), ambient-light-sensor=(), autoplay=(), battery=(), camera=(), display-capture=(), geolocation=(), hid=(), interest-cohort=(), magnetometer=(), microphone=(), usb=()
x-content-type-options: nosniff
content-security-policy: base-uri https://www.amnesty.org;frame-ancestors https://oneamnesty.sharepoint.com https://action.amnestyhk.org https://amnestyhk.org;upgrade-insecure-requests; default-src 'self' data: https://www.amnesty.org; connect-src 'self' https://apikeys.civiccomputing.com https://clapi.civiccomputing.com https://www.google.com https://my2.siteimprove.com https://googleads.g.doubleclick.net https://id.siteimprove.com https://www.google-analytics.com https://region1.google-analytics.com https://stats.g.doubleclick.net https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://contentassistant.eu.siteimprove.com https://public.flourish.studio https://oneamnesty.sharepoint.com/ https://pagesense-collect.zoho.eu https://www.recaptcha.net https://action.amnestyhk.org https://amnestyhk.org; font-src 'self' data: https://www.amnesty.org https://fonts.gstatic.com https://script.hotjar.com https://action.amnestyhk.org https://amnestyhk.org; frame-src 'self' data: https://amnesty-crisis-evidence
strict-transport-security: max-age=31536000; includeSubDomains; preload