avaaz.org

HTML metadata

Title: Avaaz - The World in Action
Description: Avaaz is the campaigning community bringing people-powered politics to decision making worldwide.
Language: en
Canonical: https://secure.avaaz.org/page/en/

Open Graph

url: https://secure.avaaz.org/page/en/
title: Avaaz - The World In Action
site name: Avaaz
description: Check out this amazing movement to create a better world -- www.avaaz.org

Technology

CDN: Cloudflare
CMS: Gatsby

Analytics

Google Tag Manager

Fonts

Google Fonts

Third-party hosts loaded (3)

www.googletagmanager.com×2
cdn.jsdelivr.net×1
fonts.googleapis.com×1

Social

Registration

Registrar

Gandi SAS

Created

1997-10-01

Expires

2026-09-30 133 days left

Updated

2025-08-06

Name servers

elsa.ns.cloudflare.com
greg.ns.cloudflare.com

DNS records live

NS

elsa.ns.cloudflare.com
greg.ns.cloudflare.com

MX

Show 7 MX records

1 aspmx.l.google.com
10 aspmx2.googlemail.com
10 aspmx3.googlemail.com
10 aspmx4.googlemail.com
10 aspmx5.googlemail.com
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com

TXT

Show 24 TXT records

notion-domain-verification=bE5nRnk3NzKLPDgW50dSIHpr3pRUa6zU0POixupjG6Q
dropbox-domain-verification=x5biuhryazkz
stripe-verification=73bfe646e39f0a0dd04c0d202dcd9a02253365dbabfb58dc0c1c3ec11154fbab
stripe-verification=4f5546911c780f48b1fb916fcb2b106145345a434611fe56d2839996e69fd520
bird-domain-verification=9381d768-2d80-48eb-90c6-eba345709aa7
canva-site-verification=SqoM5ZzKNNREqgtSMYo6xw
openai-domain-verification=dv-0IS7FHFJHMYfs8wMMFyalLLy
google-site-verification=zLJjt4Cpe2XpHQVW2IYqGmQD_bzcOHYDZszxgsDc4mQ
jamf-site-verification=MlNGTTH1zW4sdSuzDKAbPg
apple-domain-verification=ZZ4NgsWFdxpBZQvA
_6y2y5ayvwg1d3e4w3t7xmmik3wrr5go
asv=7584303da419819103ba21f50380800a
stripe-verification=e57668844ab390bad009807f50fb9c6952a087c7419b3ae51e6472d5cce5b71b
stripe-verification=854bb7812aa5e76ab67b1e882ccc4a6777fe0774e5e81037221290e463f32472
google-site-verification=InJV0UXcxLwQJ5mXOUk9d19zweQQZKBlcQQcWDuofQA
stripe-verification=6775648fd1024f1c5d51bd5aeb51b7e0f4af3a93796113c901f5c803b503c090
stripe-verification=306310be0397a2bb90abd72b2ab6a718cd2af1fd13e253bd2ea7496b75b8d7a6
stripe-verification=640ba4b2a53377ab198525ed03a6b5c697c57ac1e70cf817016731132ade3127
docker-verification=b61dfdb2-6a72-4bbe-8cf1-0604939c435a
stripe-verification=714efbe6772369f9ea13e7c2d6fbd4a4e09d3afd4751de425fe49d57773419a7
sophos-domain-verification=5903b38178b3d6d773cddb81a51c16974e8564d5d1f6ac6859a12e3ae6d816ec
stripe-verification=7ec6d826041f2286f9ce24399b661cb74427121ee6cb70a25198702f0232ee1f
atlassian-domain-verification=BzaX8IV5fDYr+Ih4bELE9aPdO0NK4NLypMpCZFakRS+KMiP3Kz5pgs0tUhwGUJMt
2wrvvm13btp58qvc265ghczk1qs8d95x

Email authentication strong

SPF

v=spf1 ip4:198.137.239.0/24 ip4:52.27.217.37 ip4:54.85.14.21 ip4:54.84.209.230 ip4:54.152.48.206 ip4:54.152.91.245 ip4:54.236.251.0/28 ip4:54.173.218.170 include:_spf.google.com include:helpscoutemail.com include:145979402.spf06.hubspotemail.net  include:mail.zendesk.com ~all

softfail (~all)

DMARC

v=DMARC1; p=reject; pct=25; adkim=r; aspf=r; fo=1; ri=3600; rua=mailto:dmarc@avaaz.org,mailto:re+5c35b7fe127b@inbound.dmarcdigests.com,mailto:ipm7fbe@ar.glockapps.com; ruf=mailto:ipm7fbe@fr.glockapps.com;

policy: reject (enforced) · pct=25

DKIM

google: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljTZ/EfDK02bL0fTq0Ah6/rTpWqVIJsZbRv2jJR5paK9Wg8USoZ/DTgdbO7UC8Dvj9ZV5PQco/OsDl…
smtpapi: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDPtW5iwpXVPiH5FzJ7Nrl8USzuY9zqqzjE0D1r04xDN6qwziDnmgcFNNfMewVKN2D1O+2J9N14hRprzByFwfQW76…

selectors probed

Certificate (current)

E7

from 2026-05-17 to 2026-08-15

Expires in 88 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 60/100 Checked live page: https://secure.avaaz.org/page/en/

present

strict-transport-security
x-content-type-options

findings

missing Content Security Policy
missing frame protection
missing Referrer Policy
missing Permissions Policy

Header values

x-content-type-options: nosniff
strict-transport-security: max-age=15552000; includeSubDomains; preload