crmp.org is the online home of the California Residential Mitigation Program, a state-backed grant program that helps homeowners fund seismic retrofits. For anyone wondering is crmp.org safe, the signals are largely reassuring. The domain is over 11 years old, security is solid, and the site publishes a privacy policy and terms of service. What stands out as unusual is that the Wayback Machine has no record of the site despite its age, which could mean the site blocked archiving or simply wasn't crawled. That doesn't make it fraudulent, but it's worth noting for a program of this longevity. The site collects registration information from contractors and homeowners, so it's a good sign that email authentication and HTTPS are properly configured. If you're a California homeowner looking into grant eligibility, crmp.org appears to be the real program. Just double-check the official state earthquake authority site if you want additional confirmation. The lack of user reviews or social media is typical for a government service, so don't read too much into that. Overall, is crmp.org fake? No, the evidence supports it being genuine, with only a minor archival gap giving pause.
In plain English
crmp.org is a legitimate-looking site for California earthquake retrofit grants. It has strong security and clear contact info, but the lack of Wayback Machine archives for an 11-year-old site is a slight oddity. Overall, it appears trustworthy for homeowners seeking grant information.
Where the score comes from
Solid security setup: modern TLS with a reputable certificate issuer, strong browser protections against clickjacking and downgrade attacks. Standard for a government-affiliated program.
The domain has been registered for over 11 years under a major registrar. The site clearly states its purpose and operator via an about page and contact info. WHOIS privacy is standard for this type of organization.
No blacklists or malware flags, which is good. However, the Wayback Machine has no snapshots despite the site being 11 years old, which is unusual and may indicate the site was not widely archived. No other reputation concerns.
The site openly describes its mission, provides contact information, and has an about page. No social media presence, but that's not unusual for a government program. The operator is upfront about who they are.
Privacy policy and terms of service are present. As a US-based government program, there are no EU-specific compliance obligations. The absence of a dedicated legal entity disclosure is not a concern here.
Proper email authentication and HTTPS enforcement are in place, hosted on a major cloud provider. DNSSEC is not enabled, a minor gap but not critical for this type of site.
What we checked
Run this site? Show your score.
Add a trust badge so visitors can see your live score for themselves.
Get your badge →