How is change.org?
Looks fine
risk 0/100
Registered 32 years ago, on no blocklists we checked, valid HTTPS, the site answered 200 in 434 ms.
Why
02050100
finecarefulhigh risk
- ·Nothing in the checks added risk.
Rule-based: domain age, blocklists, TLS. A heuristic, not a guarantee.
The home page, rendered by how.is in a sandboxed browser. Nothing on it is clickable here.
Site
200
434 ms · ends at www.change.org
HTTPS
149 d
left on a Amazon certificate
Age
32 years
registered 1995-01-18
Blocklists
0
listings across 5 lists
Everything we looked at
DNS records5 record types
| A | 18.160.10.20 18.160.10.28 18.160.10.25 18.160.10.21 |
|---|---|
| MX | 1 aspmx.l.google.com 10 aspmx2.googlemail.com 10 aspmx3.googlemail.com 10 aspmx4.googlemail.com 10 aspmx5.googlemail.com 5 alt1.aspmx.l.google.com 5 alt2.aspmx.l.google.com |
| NS | ns-1500.awsdns-59.org ns-1808.awsdns-34.co.uk ns-33.awsdns-04.com ns-828.awsdns-39.net |
| TXT | anthropic-domain-verification-5f9d7e=YkL0S0aS1j84SEp6GmpJ7gEyH apple-domain-verification=PTYgy60F6PdsntgC ca3-808f03605e0c4dbb8a9d48add36de049 canva-site-verification=v95mLWZGRX8DLNLXrIoTgw cursor-domain-verification-rd0asg=GX1gyhvGniUYOtxc4TiX1tWsi docker-verification=cdaf7d5c-37e0-404e-acbf-e384a5dcc708 docusign=4c531242-636f-4928-a046-550b453f2c2f docusign=808bc3e9-8f02-4e01-bc8f-1ad49e5c716e facebook-domain-verification=yhj6miuwjzoqne6djoy1fykcqb90as figma-domain-verification=1feb18380c33e751dbeb3394942950fb7d5340816baf266c25417f798676a4bd-1740006673 google-site-verification=5CBWZS3F8_aEBM7imVsZE3utt6rwwjnbhorJocJlv-c google-site-verification=p71ZUlZhkbGglHi3HCgww63TxCSnfBGeK-xVWhu_YRY jamf-site-verification=dtERlCKhsQvf_Eg8A-ZU-w launchdarkly-domain-verification=5d0e64d4-b833-4c33-95d3-ab4d16b8f716 meltwater_sso_20260730_120228296 miro-verification=9aebe9bad2bcf3e6c034511347f9f26380f54ade new-relic-domain-verification=df99fc261ca14157889f6db2a9191658 notion-domain-verification=LW3z2HECTotnuVYhqp5KEu34pvvGjzxWhOIpOjJ03ba openai-domain-verification=dv-0gbJgxm9E5fjmDA4IO5Q8vEa openai-domain-verification=dv-27LAOyJdh6Hr7vVLUeKlM0v1 perplexity-ai-domain-verification-0ck2rc=qCOJy6htJoSyeV3pGIeDW4Fq1 slack-domain-verification=siPDb70OOniI7JQvMeXufl7XrgZsMOVZPWiu4jdQ stripe-verification=2ed677be59315a67748076c188b8b81b29342fb27e7d2e696f86c9358676ce18 v=spf1 include:_spf.google.com include:amazonses.com include:_spf.zimpel.de ~all zapier-domain-verification-challenge=6b9188c5-55cb-47bd-9e62-eeab335ac27d |
| CAA | {'type': 'CAA', 'issue': 'amazonaws.com', 'critical': 0} {'type': 'CAA', 'issue': 'comodoca.com', 'critical': 0} {'type': 'CAA', 'issue': 'letsencrypt.org', 'critical': 0} {'type': 'CAA', 'issue': 'pki.goog; cansignhttpexchanges=yes', 'critical': 0} {'type': 'CAA', 'issue': 'sectigo.com', 'critical': 0} {'type': 'CAA', 'issue': 'ssl.com', 'critical': 0} {'type': 'CAA', 'critical': 0, 'issuewild': 'amazonaws.com'} {'type': 'CAA', 'critical': 0, 'issuewild': 'comodoca.com'} {'type': 'CAA', 'critical': 0, 'issuewild': 'letsencrypt.org'} {'type': 'CAA', 'critical': 0, 'issuewild': 'pki.goog; cansignhttpexchanges=yes'} {'type': 'CAA', 'critical': 0, 'issuewild': 'sectigo.com'} {'type': 'CAA', 'critical': 0, 'issuewild': 'ssl.com'} |
RegistrationGoDaddy.com, LLC
| registrar | GoDaddy.com, LLC |
|---|---|
| registered | 1995-01-18 |
| expires | 2029-01-19 |
| last changed | 2026-08-12 |
| nameservers | ns-1500.awsdns-59.org ns-1808.awsdns-34.co.uk ns-33.awsdns-04.com ns-828.awsdns-39.net |
| status | client delete prohibited client renew prohibited client transfer prohibited client update prohibited |
registered 1995-01-18expires 2029-01-19
HTTPS certificate149 days left
| valid | yes |
|---|---|
| issuer | Amazon |
| covers | *.change.org, change.org, *.e.change.org |
| protocol | TLSv1.3 |
issued 2026-09-10expires 2027-03-26
DNSSECinsecure
Domain is not signed with DNSSEC
. → org → change.org
Email authenticationexcellent
| SPF | pass v=spf1 include:_spf.google.com include:amazonses.com include:_spf.zimpel.de ~all |
|---|---|
| DMARC | pass policy reject |
| DKIM | found: s1, s2 |
Whether mail claiming to be from this domain can be checked as genuine.
Security scoregrade A · 180/205
Basic Security20/40missing: DNSSEC Enabled
Record Security45/45missing: DKIM Presence
Advanced Security20/25missing: IPv6 Support
Domain Reputation50/50
Threat Detection45/45missing: Domain Age Check
Blocklists0 listings · 14 lookups
SURBL MultidomainURIBL MultidomainSpamCop18.160.10.28Barracuda18.160.10.28UCEPROTECT Level 118.160.10.28SpamCop18.160.10.25Barracuda18.160.10.25UCEPROTECT Level 118.160.10.25SpamCop18.160.10.20Barracuda18.160.10.20UCEPROTECT Level 118.160.10.20SpamCop18.160.10.21Barracuda18.160.10.21UCEPROTECT Level 118.160.10.21
Green: clean. Red: listed. Grey: the list did not answer.
Ask it yourself
Agents get this as data. Bought through the API, the checks behind this page cost $0.070: profile $0.025 + trust $0.020 + screenshot $0.020 + site status $0.005.
curl "https://how.is/v1/domain/trust?domain=change.org" \
-H "Authorization: Bearer $HOWIS_KEY"
# or pay per call in USDC (x402), no key: the 402 tells your agent the price
curl -i "https://how.is/v1/domain/profile?domain=change.org"
MCP: add https://how.is/mcp to Claude, Codex or Cursor
(one-line install) and ask for domain_trust on change.org.
Reference: /llms.txt.
Watch change.org. DNS read at the source every 5 minutes; certificate, blocklists and expiry every 6 hours. You get an email only when something changes.
Watch — $1 / 30 days