Security Directory

W

Werther's Original

werthers-original.ca

0

Werther's Original is a well-established confectionery brand specializing in classic caramel treats, operating under the parent company Storck. The website targets a general audience in Canada, offering a variety of caramel products and related content such as recipes and commercials. The brand maintains consistent and professional digital branding with a focus on retail confectionery. Technically, the site is built on TYPO3 CMS with modern JavaScript frameworks and integrates analytics and advertising tools like Piwik PRO and StackAdapt. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers and incident response policies are absent. The lack of WHOIS data for the domain is a notable anomaly that slightly reduces trust but does not outweigh the overall legitimacy indicated by the brand association and website content. Strategic recommendations include improving security headers, publishing incident response information, and monitoring domain registration details to enhance trust and compliance.

W

WPlook Themes

wplook.com

0

WPlook Themes is a Canadian-based small technology company specializing in premium WordPress themes and hosting solutions. Established in 2010, it serves a broad audience including nonprofits, creatives, agencies, and businesses seeking high-quality, speed-optimized WordPress themes. The company operates an e-commerce model offering yearly and lifetime access to theme bundles, hosting plans, and customization services. The website demonstrates strong branding, professional design, and clear navigation, supported by a robust technical infrastructure built on WordPress, WooCommerce, and modern web technologies. Analytics and marketing tools such as Google Tag Manager and Facebook Pixel are integrated for user tracking and advertising purposes. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though improvements are recommended in DNSSEC adoption and security headers. Privacy compliance is partially met with a comprehensive privacy policy but lacks a cookie consent mechanism. Overall, WPlook presents a trustworthy and professional online presence with a mature digital footprint.

L

Logilys Inc.

jedonneenligne.org

0

JeDonneEnLigne.org is a French-language online donation platform initiative operated by Logilys Inc., targeting charitable organizations and donors primarily in Canada. The platform offers integrated online donation forms connected to the Prodon donor management software, enabling charities to manage donations without programming expertise. The business is positioned as a niche provider with a small company size and a mature domain presence since 2009. Technically, the website uses a modern tech stack including jQuery, Bootstrap, Google Fonts, Font Awesome, Google reCAPTCHA, and Google Tag Manager, providing a good user experience with mobile optimization and clear navigation. Security posture is adequate with HTTPS enforced and bot protection, but lacks DNSSEC and security headers, and no published security or incident response policies were found. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the website is professional, trustworthy, and well-branded, with clear contact information and social media presence. Recommendations include enhancing security headers, enabling DNSSEC, adding cookie consent, and publishing security policies to improve compliance and trust.

S

Slots Online Canada

slots-online-canada.ca

0

Slots Online Canada is a specialized online platform providing comprehensive reviews and information about Canadian online casinos, including bonus offers, slot games, and gambling news. The site targets Canadian players seeking trustworthy and detailed casino evaluations to make informed decisions. The business operates primarily as an affiliate and review site, leveraging expert insights and player feedback to maintain credibility and market relevance. Technically, the website is built on WordPress, uses modern JavaScript libraries like jQuery, and benefits from Cloudflare DNS services, ensuring moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though improvements can be made by enabling DNSSEC and adding security headers. Privacy compliance is partial, with a privacy policy present but lacking cookie consent mechanisms. Overall, the site is professional, trustworthy, and well-positioned in its niche, though it could enhance user trust by providing more direct contact information and explicit security policies.

T

Thermomix - Canada

thermomix.ca

0

Thermomix - Canada operates an e-commerce website focused on selling the Thermomix TM7 multi-cooker and related accessories. The business leverages a consultant-based sales model to provide personalized support and free shipping incentives. The website is built on the Shopify platform, utilizing modern e-commerce technologies and integrations such as Google Tag Manager, Facebook Pixel, Klaviyo, and Yotpo for marketing and analytics. The site is well-optimized for performance, mobile responsiveness, and accessibility, providing a professional user experience. However, the absence of WHOIS data and lack of visible privacy and cookie policies indicate areas for improvement in transparency and compliance. Security posture is generally good with HTTPS enforced and no obvious vulnerabilities, but explicit security headers and incident response information are missing.

S

STORCK CANADA INC.

storck.ca

0

Storck Canada Inc. operates a professional corporate website presenting its confectionery business, brand portfolio, quality standards, career opportunities, and contact information primarily via a contact form. The website is built on TYPO3 CMS and uses modern JavaScript libraries and Piwik PRO analytics, reflecting a mature digital infrastructure. Privacy and cookie policies are clearly presented and GDPR compliant, enhancing user trust. However, the absence of WHOIS data for the domain www.storck.ca raises concerns about domain registration transparency and trustworthiness. No direct company contact emails or phone numbers are published, and no explicit security or incident response policies are available, which could be improved to strengthen security posture and user confidence.

F

Fourwaves

fourwaves.com

0

Fourwaves is a Canadian-based company founded in 2019 that provides modern conference software tailored for academic event organizers. Their SaaS platform aims to simplify event management and foster connections within the academic community. The website reflects a professional and focused business model targeting academic conferences and event planning. Technically, the site employs modern analytics and marketing tools such as Google Tag Manager, Hotjar, Amplitude, and HubSpot, indicating a mature digital infrastructure. The hosting and domain registration are consistent with the company's profile, with domain security measures in place. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks explicit security policies and incident response information. Privacy compliance is partial due to the absence of a clearly accessible privacy policy and terms of service. Overall, the website is well-designed, user-friendly, and trustworthy, serving its niche audience effectively.

T

Terumo Medical Canada Inc.

terumocanada.ca

0

Terumo Medical Canada Inc. is a Canadian subsidiary of the global Terumo Corporation, specializing in manufacturing and distributing medical devices for cardiothoracic surgery, interventional procedures, and transfusion medicine. The company operates with a strong market position in Canada, supported by a professional and well-structured website that reflects its healthcare industry focus. The website provides comprehensive product information, clear contact details, and complies with privacy regulations including GDPR. Technically, the site uses modern tools such as Adobe Experience Manager CMS, Google Analytics, Hotjar, and Ensighten for tag management, hosted likely on Azure infrastructure. Security posture is good with HTTPS and clientTransferProhibited domain status, though improvements like enabling DNSSEC and additional security headers are recommended. Overall, the website is trustworthy, professional, and safe for general audiences.

Coroneo is a specialized medical device company focused on innovative cardiac surgery implants and instruments, particularly for aortic valve repair. The company positions itself as a world leader with a history dating back to 1997, offering products that preserve native valves and improve surgical outcomes. Their market presence spans North America, Europe, and Asia through dedicated distributors. Technically, the website is built on WordPress with modern plugins and demonstrates good mobile optimization and user experience. Security measures include HTTPS and Google reCAPTCHA, but lack some advanced security headers and published security policies. The absence of WHOIS data for the domain raises concerns about domain legitimacy, although the website content and certifications suggest a credible business. Overall, the site is professional and compliant with cookie consent regulations but would benefit from enhanced transparency and security disclosures.

T

The English Mansion

theenglishmansion.com

0

The English Mansion operates as a niche adult content membership website specializing in femdom BDSM videos and related fetish content. It targets an adults-only audience with explicit content and enforces age verification for UK subscribers. The site claims over 20 years of operation and positions itself as a leader in its niche, offering daily updated HD videos and VR content. Technically, the site uses basic HTML, CSS, and JavaScript with Google Analytics for tracking. However, there is no evidence of a modern CMS or advanced frameworks. Security posture is weak, lacking HTTPS enforcement and security headers, and no privacy or cookie policies are present. The absence of WHOIS registration data and contact information reduces business credibility and trust. Overall, the site is functional but requires significant improvements in security, privacy compliance, and transparency to enhance trust and user safety.

R

Revy Apps

revy.io

0

Revy Apps is a small Canadian-based company specializing in developing premium Shopify applications aimed at helping merchants grow their online stores. Their product portfolio includes apps such as Unlimited Bundles & Discounts and Unlimited Smart UpSell Offers, targeting Shopify store owners seeking to increase sales through automated and easy-to-use tools. The company has been operational since 2017 and serves thousands of merchants globally, positioning itself as a niche player in the e-commerce app market. Technically, the website employs a modern technology stack including Bootstrap for responsive design, jQuery, and several UI libraries like Owl Carousel and Slick Carousel. It integrates Google Analytics and Helpscout Beacon for analytics and customer support, respectively. The site is hosted behind Cloudflare DNS, ensuring reliable performance and security, although DNSSEC is not enabled. The website is mobile-optimized with good SEO practices and a clean, professional design. From a security perspective, the site enforces HTTPS and has domain status protections to prevent unauthorized changes. However, it lacks several security headers and does not implement a cookie consent mechanism, which may impact privacy compliance. No explicit security policies or incident response contacts are published, and no vulnerability disclosure program is evident. The WHOIS data is consistent with the business claims, showing a legitimate registration with no privacy protection, enhancing trust. Overall, Revy.io presents a trustworthy and professional online presence with a solid business model and technical foundation. To improve, the company should enhance privacy compliance by adding cookie consent, implement security headers, and publish security policies. These steps will strengthen their security posture and regulatory adherence, supporting continued growth and customer trust.

S

Smile Inc.

smile.io

0

Smile.io is a well-established SaaS company founded in 2013, specializing in loyalty program solutions tailored for Shopify brands. The company positions itself as a leading loyalty platform, offering scalable and Shopify Plus certified services to e-commerce businesses. The website reflects a professional and modern design, leveraging technologies such as Framer for CMS and PostHog for analytics, hosted on AWS infrastructure. The technical implementation is solid with good mobile optimization and SEO practices, although some accessibility features could be improved. Security posture is adequate with HTTPS enabled and domain transfer protections, but lacks advanced security headers and published security policies. Privacy compliance is weak due to the absence of visible privacy and cookie policies or consent mechanisms. Overall, the domain registration data aligns well with the business claims, indicating high legitimacy and trustworthiness.

M

Mastodon Canada

mstdn.ca

0

Mastodon Canada (mstdn.ca) is an independent Mastodon social networking server focused on serving Canadians, including First Nations, Metis, and Inuit peoples. It provides a federated social platform for community engagement within the fediverse, leveraging the open source Mastodon software. The website offers trending posts, hashtag exploration, and a profiles directory, targeting a niche audience interested in Canadian and Indigenous social networking. Technically, the site uses modern web technologies including React, TypeScript, and Rails, hosted behind Cloudflare DNS and CDN services. The platform is accessible, mobile-optimized, and shows good design and navigation quality. Security posture is adequate with HTTPS enforced and domain transfer protections, but lacks advanced security headers and explicit incident response policies. Privacy compliance is basic with a privacy policy present but no cookie consent or terms of service. Overall, the site is legitimate and trustworthy as a community platform but could improve in privacy and security transparency.

C

Church & Dwight Co., Inc.

1stresponse.ca

0

The website www.1stresponse.ca is a commercial retail and informational platform focused on pregnancy tests, fertility lubricants, and pregnancy planning tools. It is branded under First Response, a trademark of Church & Dwight Co., Inc., a recognized company in the healthcare and consumer products sector. The site targets individuals planning pregnancy or seeking fertility-related products and information, offering product listings, online calculators, and educational resources. The market position is strong with cited awards and clear brand consistency. Technically, the site uses modern front-end technologies including jQuery, Slick Carousel, FontAwesome, and Google Fonts, with marketing/tracking scripts from MikMak. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is moderate with HTTPS in use but lacks explicit security headers and published security policies. Privacy compliance is weak due to absence of explicit privacy and cookie policies or consent mechanisms. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces transparency but does not detract significantly from legitimacy given the brand association. Overall, the site is professional, trustworthy, and serves its target audience effectively.

Trojan.ca is the Canadian website for Trojan, a well-known brand specializing in sexual wellness products including condoms, lubricants, and vibrating massagers. The site is professionally designed and targets adult consumers in Canada seeking high-quality sexual health products. It is owned by Church & Dwight Co., Inc., a large enterprise with a strong market presence. The website leverages modern technologies such as Google Tag Manager and OneTrust for cookie consent, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and privacy policies in place, though some security headers and explicit incident response contacts are missing. Overall, the site is legitimate, trustworthy, and compliant with privacy regulations, serving a niche adult market effectively.

Church & Dwight Canada Corp. operates as a manufacturer and distributor of well-known consumer household brands trusted by Canadian consumers. The website presents a professional corporate image with clear branding and a focus on product families such as ARM & HAMMER™, GRAVOL™, and others. The company targets Canadian households and emphasizes reliability and effectiveness in its product offerings. The business is a subsidiary of Church & Dwight Co., Inc., with a domain age consistent with its market presence since 2000. Technically, the website employs modern tracking and consent management technologies including Google Tag Manager, Google Analytics, and OneTrust for cookie consent. The hosting is managed via MarkMonitor, a reputable provider. The site is mobile optimized and accessible, with good SEO practices and clear navigation. However, no CMS or specific frameworks were detected. From a security perspective, the site uses HTTPS and has domain status flags that prevent unauthorized transfers or updates. DNSSEC is not enabled, and no advanced security headers were detected. There is no published security policy or incident response information, which could be improved. The cookie consent mechanism is robust and GDPR compliant, reflecting good privacy practices. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations. The absence of direct contact emails or phone numbers is mitigated by a contact form hosted on a related domain. Recommendations include enabling DNSSEC, adding security headers, and publishing security and incident response policies to enhance trust and security posture.

E

Esso

esso.ca

0

Esso, a major Canadian fuel brand owned by ExxonMobil, operates a comprehensive website offering information on fuel products, loyalty programs, mobile apps, and community partnerships such as hockey sponsorships. The site targets Canadian consumers and commercial clients, providing a seamless digital experience with strong branding and extensive content. Technically, the website leverages modern technologies including Sitecore CMS, AWS hosting, and integrates multiple third-party marketing and analytics tools. Security posture is robust with HTTPS enforcement, strong content security policies, and cookie consent mechanisms, although explicit security policy and incident response information are not publicly available. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with privacy regulations, supporting Esso's market position as a leading energy retailer in Canada.

M

Mobil Canada

mobilfuel.ca

0

Mobil Canada operates a professional and well-branded website focused on providing fuel and convenience store services integrated with the PC Optimum loyalty program. The site reflects a large energy sector business with strong ties to ExxonMobil, leveraging modern web technologies and cloud hosting. The technical infrastructure is mature, utilizing Sitecore CMS, AWS hosting, and multiple third-party marketing and analytics tools. Security posture is strong with HTTPS, CSP headers, and cookie consent mechanisms, though explicit security policies and incident response information are not publicly available. The absence of WHOIS data suggests privacy protection, which is justified for a corporate brand. Overall, the website is trustworthy, professional, and compliant with privacy regulations.

R

Radio-Canada

radio-canada.ca

0

Radio-Canada is the French-language public broadcaster in Canada, providing a comprehensive range of news, radio, television, sports, and arts content. The website serves as a digital platform to inform and entertain a broad audience, primarily French-speaking Canadians. It holds a strong market position as a trusted source of information and cultural programming under the umbrella of the Canadian Broadcasting Corporation. The site features consistent branding and professional content quality, reflecting its status as a major public media entity. Technically, the website employs modern web technologies including React, Google Tag Manager, and Facebook Pixel for analytics and marketing. It is optimized for mobile devices and demonstrates good SEO and accessibility practices. The presence of a PWA manifest indicates a focus on progressive web app capabilities, enhancing user experience across platforms. From a security perspective, the site enforces HTTPS with strong SSL configuration and implements multiple security headers to protect users. No critical vulnerabilities or exposed sensitive data were detected in the provided content. Privacy compliance is well addressed with clear privacy and cookie policies, including consent mechanisms aligned with GDPR requirements. However, explicit contact information for security or incident response was not found. Overall, Radio-Canada's website presents a low-risk profile with high trustworthiness and professionalism. Strategic recommendations include continuous monitoring of third-party scripts, ensuring secure form handling, and maintaining up-to-date security practices to sustain its strong security posture.

C

Canadian Broadcasting Corporation

cbc.ca

0

CBC.ca is the official website of the Canadian Broadcasting Corporation, Canada's public broadcaster. It offers a comprehensive range of services including news, entertainment, sports, radio, and music streaming. The website targets the Canadian general public and maintains a strong market position as a leading media entity in Canada. CBC operates under a public funding and advertising-supported business model, delivering high-quality content with consistent branding and trust signals. Technically, the site employs modern web technologies such as React, integrates multiple third-party analytics and advertising services, and uses a consent management platform to comply with privacy regulations. The site is well-optimized for performance, mobile responsiveness, accessibility, and SEO. Security posture is strong with HTTPS enforcement, modern security headers, and no visible vulnerabilities. Privacy compliance is robust with clear policies and consent mechanisms. Overall, CBC.ca demonstrates a mature digital infrastructure and a professional, trustworthy online presence.

J

Jenny Zhang

phirework.com

0

The website phirework.com serves as a personal professional portfolio for Jenny Zhang, an experienced tech lead specializing in full-stack development, API design, and accessibility. The site also highlights her community organizing efforts in Toronto. The business model is focused on personal branding and community engagement rather than commercial services. The site is small-scale and targets mission-oriented organizations and tech professionals. Technically, the website is simple and lightweight, built with standard HTML and CSS, hosted on NearlyFreeSpeech.net. It uses HTTPS and a reputable registrar but lacks advanced security headers and DNSSEC. The site is mobile responsive at a basic level and has good performance with minimal tracking or advertising. From a security perspective, the site benefits from HTTPS and domain transfer protection but lacks formal privacy, cookie, or security policies. No vulnerability disclosure or incident response information is provided. The absence of security headers and DNSSEC are areas for improvement. No critical vulnerabilities or suspicious patterns were detected. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security hardening to improve its posture and user trust.

S

Show Up Toronto

showuptoronto.ca

0

Show Up Toronto is a small non-profit community platform dedicated to aggregating and promoting social justice, mutual aid, and advocacy events in Toronto. The website provides a curated calendar of events, weekly email updates, and calendar feeds to engage local activists and residents. The platform leverages modern web technologies such as htmx and integrates with third-party services like Buttondown for email subscriptions. Hosting is managed via Hover with a domain registered in 2025, consistent with the site's recent launch and event dates. Security posture is adequate with HTTPS and domain transfer protections, but lacks DNSSEC and security headers. Privacy and cookie policies are absent, representing compliance gaps. The site maintains a clean, professional design with clear navigation and social media presence on Bluesky, Mastodon, and Instagram. Overall, the website is trustworthy and serves its community-focused mission effectively, though improvements in privacy compliance and security hardening are recommended.

LEELOODLES is a small, youth-led ecommerce business specializing in humorous and creative tshirts and apparel based in Toronto, Canada. The website is hosted on the Big Cartel platform and integrates Stripe and PayPal for payment processing. The business targets a general audience interested in unique, themed apparel, leveraging social media channels for brand presence. The website design and navigation are good, with mobile optimization and clear product listings. However, the site lacks critical privacy and cookie policies, and no direct contact emails or phone numbers are provided, only a contact form. Security posture is moderate with HTTPS enabled but missing security headers and DNSSEC. WHOIS data is inconsistent and suspicious, showing a future domain creation date and a drop-catching registrar, which raises legitimacy concerns despite the professional website content. Overall, the site is functional and safe but requires improvements in privacy compliance and domain registration transparency.

E

Electricity Transformation Canada

electricity-transformation.ca

0

Electricity Transformation Canada is a newly established platform and event organizer focused on accelerating the renewable energy transition across Canada. Founded in 2024, it serves as a hub for industry professionals, government representatives, and innovators to collaborate, showcase technologies, and drive clean energy adoption. The website reflects a professional and consistent brand presence with clear messaging about its mission and services. Technically, the site is built on WordPress with Elementor and integrates SEO and analytics tools, indicating moderate digital maturity. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and cookie consent mechanisms, which are recommended for compliance and protection. Overall, the domain registration and website content align well, supporting the legitimacy of the business.

D

Dash Social

dashhudson.com

0

Dash Social is a Canadian-based technology company founded in 2013 that offers a comprehensive social media management platform. Their SaaS solution integrates AI-powered tools for content performance prediction, creator and influencer management, social analytics, campaign reporting, scheduling, and social commerce. The company targets brands, marketers, and social media managers seeking to optimize social media engagement and ROI. The website demonstrates a mature digital presence with rich content, customer testimonials, and partner badges from major platforms like TikTok, Meta, and Pinterest, indicating strong market positioning. Technically, the website is built on Webflow CMS and leverages modern JavaScript libraries such as jQuery, GSAP, and Slick Carousel for interactive features. It employs Google Tag Manager and HubSpot for analytics and marketing automation. The site is mobile-optimized, fast-loading, and SEO-friendly. Security practices include HTTPS enforcement and a cookie consent mechanism with opt-in compliance, though explicit security headers are not detected. From a security perspective, the site shows good maturity with no visible vulnerabilities or exposed sensitive data. However, the absence of WHOIS domain registration data is a notable concern, potentially indicating privacy protection or data source limitations. The presence of a suspicious external script domain warrants further review. Overall, the site maintains good privacy compliance and business credibility but could improve transparency in domain registration and security disclosures. Strategically, Dash Social should enhance its security posture by publishing a vulnerability disclosure policy, adding security headers, and providing incident response contacts. These steps will strengthen trust and compliance. The technical infrastructure is solid but could benefit from continuous monitoring of third-party scripts and further accessibility improvements.

H

HELUKABEL

helukabel.ca

0

HELUKABEL Canada Inc. is a well-established international manufacturer and supplier of cables, wires, and cable accessories, serving industrial, energy, and infrastructure sectors. Founded in 1978, the company operates globally with 76 locations across 43 countries, emphasizing custom cable manufacturing and connection technology. The website reflects a professional and comprehensive digital presence, targeting industrial customers and infrastructure markets with detailed product offerings and industry solutions. Technically, the site employs modern frameworks such as Bootstrap and jQuery, integrates Piwik PRO for analytics, and provides a responsive, well-structured user experience. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and published security policies are absent. The lack of WHOIS data transparency is a notable gap, impacting domain trustworthiness. Overall, the website demonstrates strong business credibility and digital maturity, with room for improvement in security transparency and incident response documentation.

Tourmkr.com is a technology-focused website operated by Gothru Media Inc., offering a virtual tour creation platform tailored for Google Trusted Photographers and businesses requiring immersive 360-degree virtual tours. The platform provides a rich set of features including predefined themes, plugins, VR support, and downloadable tours, positioning itself as a niche player in the virtual tour market. The business model is subscription-based with free and paid tiers, targeting professionals in real estate, architecture, and tourism sectors. The company is based in Canada and has been operational since 2015, reflecting a mature presence in its domain. Technically, the website leverages modern web technologies such as Angular 14 and Progressive Web Application standards, ensuring good mobile optimization and user experience. Hosting is managed via Amazon AWS infrastructure, and the site integrates with external services including Oculus VR platforms and Google APIs. While the site performs moderately well, there is room for improvement in SEO and accessibility compliance. From a security perspective, the site uses HTTPS and avoids exposing sensitive data, but lacks several security headers and formalized privacy and cookie policies, which are critical for GDPR compliance and user trust. No incident response or vulnerability disclosure mechanisms are publicly available, indicating potential gaps in security governance. The WHOIS data is consistent and transparent, supporting the legitimacy of the domain and business. Overall, Tourmkr.com presents a professional and trustworthy platform with solid technical foundations but requires enhancements in privacy compliance and security best practices to strengthen its risk posture and regulatory adherence.

E

Evik Diagnostics

evikdiagnostics.com

0

Evik Diagnostics is a specialized contract manufacturer focused on lyophilized reagent beads (Lyobeads) for diagnostic assays across medical, veterinary, environmental, and agricultural sectors. The company offers contract development, manufacturing, automation, and assay formulation services, supported by ISO 13485:2016 certification, indicating a strong commitment to quality management. Their website presents a professional image with clear service offerings and industry focus, targeting diagnostic manufacturers seeking stable, ambient storage assay reagents. Technically, the website is built on Joomla CMS with the T3 framework and Bootstrap 3, utilizing modern JavaScript libraries such as jQuery and Google Tag Manager for analytics. The site is mobile-optimized with good navigation and SEO practices, although accessibility features are basic. Security posture is moderate with no visible security headers or explicit SSL configuration details, and no privacy or cookie policies are present, indicating gaps in compliance and user data protection transparency. The WHOIS data is notably missing or unavailable, which raises concerns about domain registration legitimacy despite the active and professional website presence. This discrepancy lowers the overall trust score and suggests a need for further verification of domain ownership. No WAF or blocking mechanisms were detected, and the site content is safe and business-focused. Overall, Evik Diagnostics demonstrates a solid business and technical foundation but should address privacy compliance and domain registration transparency to enhance trust and security posture.

N

National Nursing Assessment Service

nnas.ca

0

The National Nursing Assessment Service (NNAS) operates as a credentialing body for internationally educated nurses aiming to practice in Canada. It provides streamlined services including expedited and regular credentialing for nursing professions such as RN, LPN, and RPN. The organization positions itself as the primary gateway for nursing professionals entering the Canadian healthcare system, supported by comprehensive resources and educational content. The website reflects a professional and trustworthy presence with clear navigation and a focus on user experience. Technically, the website is built on WordPress with modern SEO and analytics tools such as Yoast SEO, Google Tag Manager, and LinkedIn Insight tags. The site is mobile-optimized and accessible, with good performance metrics. However, there is room for improvement in security headers and explicit privacy and cookie policy disclosures. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. The absence of security headers and incident response information suggests moderate security maturity. No vulnerabilities or suspicious patterns were detected in the content or scripts. The lack of WHOIS data is typical for Canadian domains but reduces transparency. Overall, the website presents a low-risk profile with strong business credibility and technical implementation. Strategic improvements in privacy compliance and security policy transparency would enhance trust and regulatory alignment.

C

Centre de design de l'UQAM

centrededesign.com

0

Centre de design de l'UQAM is a well-established educational and cultural institution affiliated with the Université du Québec à Montréal, specializing in design exhibitions and public programming. The website serves as a portal for upcoming exhibitions, events, and archival content, targeting students, design professionals, and the general public interested in design culture. The business model is non-profit and educational, with a strong local presence in Montreal, Canada. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, Yoast SEO, and Google Analytics integration. The site is mobile-optimized and uses responsive design principles. Hosting is managed via GoDaddy, and the domain is long-standing and consistent with the institution's history. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks DNSSEC and explicit security headers. No privacy policy or terms of service pages were found, though a cookie consent mechanism is implemented. Contact information is clearly presented, enhancing business credibility. No signs of WAF or content blocking were detected. Overall, the website is professional, trustworthy, and functional but could improve privacy compliance and security hardening to align with best practices.

Miele is a well-established premium brand specializing in luxury home appliances including kitchen, laundry, floorcare, and cleaning products. The website targets Canadian consumers seeking high-quality appliances and offers an online catalog and e-commerce capabilities. The brand emphasizes quality and heritage dating back to 1899, positioning itself as a leader in the luxury appliance market. Technically, the website employs modern frameworks such as Bootstrap and integrates marketing and analytics tools like Google Tag Manager and Yotpo. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks explicit security headers and published security policies. WHOIS data for the domain is unavailable, which reduces trustworthiness and should be investigated further. Overall, the website is professional and trustworthy but could improve transparency and security practices.

C

CanWaCH

cansfe.ca

0

CanWaCH operates as the Canadian Partnership for Women and Children's Health, focusing on global health initiatives to improve the wellbeing of women and children worldwide. The organization provides a data exchange platform, resource center, membership services, and hosts events to engage stakeholders. Positioned as a leading non-profit in the Canadian global health sector, CanWaCH targets health professionals, members, and the public interested in women's and children's health. The website is professionally designed, bilingual (French focus), and well-structured to serve its audience effectively. Technically, the website is built on WordPress with modern plugins and frameworks such as Bootstrap 4, Yoast SEO, and Contact Form 7. It uses Cloudflare DNS and is hosted via Go Daddy Domains Canada. Performance is moderate with good mobile optimization and accessibility features. Security measures include HTTPS, Google reCAPTCHA, and cookie consent management, though some security headers could be improved. The security posture is solid with no detected vulnerabilities or exposed sensitive data. Privacy compliance is strong, with comprehensive privacy and cookie policies and consent mechanisms in place. However, the site lacks explicit security policies, incident response information, and vulnerability disclosure mechanisms. Overall, CanWaCH presents a trustworthy, professional online presence with a strong focus on privacy and user engagement. Strategic improvements in security headers and transparency around security policies would enhance its security maturity and trustworthiness further.

T

The Canadian Partnership for Women and Children’s Health (CanWaCH)

canwach.ca

0

The Canadian Partnership for Women and Children’s Health (CanWaCH) is a Canadian non-profit organization dedicated to advancing the health and rights of women and children globally. Established in 2016, CanWaCH operates as a partnership of Canadian organizations and global citizens, providing services such as data exchange, resource centers, advocacy, and membership engagement. The organization maintains a strong market position within the Canadian global health sector, supported by a professional and content-rich website that effectively communicates its mission and services. Technically, the website is built on WordPress with a modern tech stack including Bootstrap 4, jQuery, and various plugins for SEO, GDPR compliance, and user engagement. Hosting and DNS services are provided by reputable providers including Go Daddy and Cloudflare. The site demonstrates good performance, mobile optimization, and accessibility, with comprehensive SEO and structured data implementation. From a security perspective, the site uses HTTPS, reCAPTCHA for forms, and cookie consent management, reflecting a solid security posture. However, there is room for improvement in enabling DNSSEC and implementing additional security headers. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is robust, with clear privacy and cookie policies and GDPR adherence. Overall, CanWaCH presents a low-risk profile with a high level of professionalism and trustworthiness. Strategic recommendations include enhancing security headers, publishing explicit security and incident response policies, and adding a terms of service page to further strengthen compliance and user trust.

V

Veolia Canada

veolia.ca

0

Veolia Canada is a subsidiary of the global Veolia Group, specializing in environmental solutions including water, waste, and energy management. The company serves cities, industries, and communities with a focus on sustainability and resource protection. The website reflects a mature enterprise with a comprehensive digital presence, including multi-language support and regional site links. Technically, the site is built on Drupal CMS, uses modern web technologies, and implements strong privacy and consent management tools such as Didomi and Google Tag Manager. Security posture is strong with HTTPS and security headers in place, though explicit security policies and incident response contacts are not publicly disclosed. Overall, the site is professional, trustworthy, and compliant with GDPR standards.

A

Amref Health Africa Canada

amrefcanada.org

0

Amref Health Africa Canada is a well-established non-profit organization focused on improving health outcomes across Africa through community-led programs. The organization operates with a Canadian office that supports fundraising, advocacy, and engagement efforts. The website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding consistency. Technically, the site is built on WordPress with modern plugins and integrations, including SEO and security tools. Security posture is good with HTTPS and reCAPTCHA implemented, though DNSSEC is not enabled and no explicit security policy is published. Privacy compliance is strong with visible cookie consent and a detailed privacy policy. Overall, the domain registration data supports the legitimacy and long-standing presence of the organization.

S

Snipcart

snipcart.com

0

Snipcart is a mature SaaS e-commerce platform founded in 2013, specializing in providing a shopping cart solution that integrates easily with any website or tech stack. It targets developers and merchants seeking a flexible, developer-friendly e-commerce solution with features supporting physical and digital product sales, multi-currency, discounts, shipping, and tax management. The company has established a strong market presence with over 20,000 merchants trusting its platform. Technically, the website leverages modern JavaScript frameworks such as Vue.js and Nuxt.js, with Cloudflare DNS and Google Analytics for performance and tracking. The site is well-optimized for mobile and accessibility, with excellent design and user experience. Security posture is strong, with HTTPS enforced, security headers in place, and no detected vulnerabilities, although DNSSEC is not enabled and incident response contacts are not explicitly provided. Privacy compliance is good, with clear privacy and cookie policies and GDPR adherence. Overall, Snipcart presents a professional, trustworthy, and technically sound e-commerce solution.

S

Straydog Branding

straydogbranding.com

0

Straydog Branding is a well-established boutique branding and website design agency based in Vancouver, Canada, with a history dating back to 2008. The company offers a comprehensive suite of services including website design, branding, graphic design, SEO, PPC, social media marketing, and more. Their market position is strong within their niche, supported by an award-winning portfolio and a focus on quality and customer service. Technically, the website is built on WordPress using modern frameworks and plugins, hosted on WPEngine, and incorporates essential marketing and analytics tools. Security posture is adequate with HTTPS and reCAPTCHA implemented, though improvements such as DNSSEC and security headers are recommended. Privacy compliance is partially met with a privacy policy present but lacking cookie consent mechanisms. Overall, the website is professional, trustworthy, and well-optimized for its target audience.

B

Baxter

baxter.ca

0

Baxter is a well-established global healthcare company focused on delivering innovative solutions in hospital care, nutritional care, and surgical care. The website reflects a mature digital presence with comprehensive content targeting patients, healthcare professionals, and partners. The company emphasizes its heritage and commitment to saving and sustaining lives through advanced medical products and technologies. Technically, the site is built on Drupal 10, uses modern video streaming via Brightcove, and integrates Google Tag Manager and cookie consent mechanisms, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and privacy policies in place, though explicit security headers and incident response contacts could be improved. Overall, the site is professional, trustworthy, and compliant with privacy regulations, supporting Baxter's market position as a leading healthcare provider.

W

World Ovarian Cancer Coalition

worldovariancancercoalition.org

0

The World Ovarian Cancer Coalition is a Canadian-based non-profit organization established in 2016, dedicated to global advocacy, awareness, and research collaboration focused exclusively on ovarian cancer. The website serves as a comprehensive resource hub for patients, advocates, healthcare professionals, and researchers, offering educational content, study results, and global partnership information. The organization positions itself uniquely as the only global coalition focused solely on ovarian cancer, working with nearly 200 patient advocacy groups worldwide. Technically, the website is built on WordPress using a modern theme framework (FoundationPress) and integrates multiple plugins and third-party services such as Google Tag Manager, Facebook SDK, Iubenda for privacy compliance, and AddToAny for social sharing. The site is mobile-optimized with good SEO and accessibility basics, though some improvements in accessibility and security headers could be made. Hosting is provided by a reputable registrar, Netregistry Wholesale Pty Ltd. From a security perspective, the site enforces HTTPS and uses reputable privacy and cookie management services, indicating a strong privacy posture. However, it lacks explicit security headers and a published security policy or incident response contact, which are recommended for enhanced security maturity. No vulnerabilities or suspicious activities were detected in the content or scripts. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations such as GDPR. It effectively supports its mission through clear navigation, quality content, and integration with social media and analytics tools. Strategic recommendations include enhancing security headers, enabling DNSSEC, and publishing a vulnerability disclosure policy to further strengthen trust and security posture.

T

TheCanadian.Social

thecanadian.social

0

TheCanadian.Social is a niche Mastodon social networking platform focused on Canadian politics, sports, and current events, serving a small but active user base. It operates as an independent Mastodon instance within the fediverse, providing users with a decentralized social media experience without ads or algorithms. The platform leverages modern web technologies including Ruby on Rails and React, with media assets hosted on Backblaze B2, ensuring a contemporary and mobile-optimized user experience. Security posture is moderate with HTTPS implied, but lacks explicit security headers and formal policies such as terms of service or incident response contacts. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the site is legitimate and trustworthy within its community but could improve transparency and compliance.

I

ISGyP

isgyp.ca

0

ISGyP is a specialized non-profit professional society dedicated to gynecological pathology education and professional development. The organization offers a range of educational services including monthly live virtual events, webinars, case presentations, journal clubs, and podcasts targeted at medical professionals and trainees in the field. The website serves as a hub for membership management, event registration, and educational content dissemination. Technically, the site is built on WordPress using well-known plugins such as Yoast SEO, The Events Calendar, and Gravity Forms, indicating a mature digital infrastructure. The site is mobile optimized and uses HTTPS with Google Analytics and Tag Manager for analytics tracking. Security posture is moderate with HTTPS enabled and nonce-protected login forms, but lacks DNSSEC and explicit security headers. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Overall, the site is professional and trustworthy but could improve in security and privacy compliance.

H

Hillrom

hillrom.ca

0

Hillrom is a recognized medical technology provider specializing in supplying medical equipment and healthcare solutions to hospitals and caregivers. The company operates globally with a strong presence in Canada and is a subsidiary of Baxter International Inc. Their website demonstrates a professional and consistent brand image, targeting healthcare providers and institutions with solutions aimed at improving patient outcomes and clinical efficiency. The digital infrastructure is built on modern technologies including Adobe Experience Manager, React.js, and integrates advanced analytics and consent management tools. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though there is room for improvement in explicit security headers and published security policies. The absence of WHOIS data for the Canadian domain suggests privacy protection or domain registration nuances, common in enterprise environments. Overall, the website is trustworthy, well-structured, and compliant with basic privacy standards, serving as a credible digital front for Hillrom's healthcare offerings.

The Canadian Association of Pathologists (CAP-ACP) is a well-established professional organization serving pathologists in Canada. The website reflects a professional association focused on education, advocacy, and member services within the healthcare sector. The domain is over 17 years old, consistent with the organization's founding date, and is registered transparently with a reputable registrar. Technically, the website uses common web technologies including Bootstrap, Font Awesome, and JavaScript libraries, with monitoring tools like New Relic and DataDome integrated for performance and security monitoring. The site is served over HTTPS, ensuring secure communications, but lacks DNSSEC and some recommended security headers. Privacy and cookie policies are not explicitly found in the provided content, indicating room for improvement in compliance and transparency. Overall, the website is professional, trustworthy, and serves its target audience effectively, though enhancements in privacy compliance and security best practices are recommended.

L

Lightspeed

lightspeedhq.com

0

Lightspeed is a leading provider of fast, intuitive point of sale (POS) and commerce platforms tailored for retail, hospitality, and golf businesses. The company positions itself as a market leader offering comprehensive SaaS solutions that enable businesses to streamline operations and enhance customer experiences. The website reflects a mature digital presence with professional branding and clear messaging targeting business customers in these sectors. Technically, the site leverages modern web technologies including WordPress CMS, Tailwind CSS, Google Tag Manager, and advanced analytics tools such as Datadog RUM and Visual Website Optimizer, indicating a high level of digital maturity and performance optimization. Security posture is strong with HTTPS enforcement, reCAPTCHA Enterprise integration, and comprehensive cookie consent management, although the absence of a dedicated security policy or incident response information suggests room for improvement in transparency and preparedness. Overall, the website is professional, trustworthy, and well-optimized, but the lack of WHOIS data and some security documentation slightly reduce the overall trust score.

P

PC Financial

pcfinancial.ca

0

PC Financial is a Canadian financial services brand offering banking and credit card products integrated with the PC Optimum loyalty rewards program. The website presents a professional and modern digital presence, leveraging advanced web technologies such as Next.js and React, and integrates multiple marketing and analytics tools to optimize user engagement and business insights. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although explicit security policies and incident response contacts are not publicly detailed. Privacy compliance is well addressed with comprehensive privacy and cookie policies and consent mechanisms. Overall, the website reflects a mature, trustworthy financial brand with a strong focus on customer rewards and digital banking convenience.

The website pcexpress.ca is currently inaccessible due to a Web Application Firewall or security mechanism blocking access, as evidenced by the 'Access Denied' page and references to Akamai's error domain. This prevents any direct analysis of the site's content, policies, or services. The domain is registered to an entity located in Canada with a registration date in 2016, suggesting an established business presence. However, the lack of accessible content limits the ability to verify business claims or assess digital maturity. Technically, the site uses Akamai nameservers, indicating reliance on a major CDN and security provider, but DNSSEC is not enabled, which is a potential security enhancement area. Security posture cannot be fully evaluated due to blocked content, but no immediate vulnerabilities or exposed data are visible. Overall, the site scores low on content quality and security posture due to inaccessibility, with moderate business credibility based on WHOIS data. Strategic recommendations include enabling DNSSEC, publishing clear privacy and security policies, and ensuring the site is accessible for proper evaluation.

L

Loblaws Inc.

pcoptimum.ca

0

PC Optimum is a prominent Canadian loyalty rewards program operated by Loblaws Inc., offering customers the ability to earn and redeem points across a wide network of grocery stores, pharmacies, and fuel stations. The program integrates with PC Financial Mastercard to provide enhanced rewards, targeting Canadian consumers who frequently shop at affiliated retail locations. The website demonstrates a mature digital presence with a modern React-based tech stack, integration of third-party services for analytics, marketing, and user engagement, and strong mobile optimization. Security posture is robust with HTTPS enforcement, security headers, and cookie consent mechanisms, although incident response contact details are not publicly visible. Overall, the domain and website content align with a legitimate enterprise-grade retail loyalty program.

ShapeDividers.com is a specialized online tool developed by Maxime Desrosiers that provides an SVG Shape Dividers Generator for web designers and developers. The website offers a niche service enabling users to create vertical, responsive, and animated SVG shape dividers that integrate well with popular platforms such as WordPress and Webflow. The business operates primarily as a small-scale digital service provider with a focus on design and web development technology. Technically, the website is built on WordPress with modern plugins like Elementor and Easy Digital Downloads, ensuring a solid infrastructure with good SEO and mobile optimization. The site uses HTTPS and domain locking for security but lacks advanced DNS security features like DNSSEC. Security posture is generally good, though the absence of published security policies, vulnerability disclosures, and comprehensive privacy policies indicates room for improvement. Overall, the website is professional and trustworthy within its niche but could enhance compliance and transparency to strengthen user trust and security readiness.

C

Canada Foundation for Innovation

innovation.ca

0

The Canada Foundation for Innovation (CFI) is a Canadian government-related non-profit organization focused on investing in research infrastructure across Canadian universities, colleges, research hospitals, and non-profit research institutions. The website positions CFI as a national leader in funding and supporting research infrastructure that drives innovation, economic growth, and knowledge mobilization. The site targets researchers, academic institutions, and policy makers with comprehensive resources, funding opportunities, and impact stories. Technically, the website is built on Drupal 10, leveraging modern web technologies and third-party analytics tools like Google Tag Manager and Hotjar. The site is mobile-optimized, accessible, and professionally designed, reflecting a mature digital presence. Security posture is generally strong with HTTPS enforced, but lacks some security headers and a cookie consent mechanism, which are recommended for enhanced compliance and protection. WHOIS data is unavailable, likely due to privacy protection, but the domain is a Canadian ccTLD consistent with the organization's identity. Overall, the website is trustworthy, professional, and serves its audience well with clear navigation and relevant content.

E

eVision Inc.

evision.ca

0

Synto, developed by eVision Inc., is a technology platform focused on synthesizing governance best practices and optimizing performance in funding application processing and compliance management. The platform leverages AI for performance monitoring and predictive trend analysis, targeting funding program managers and ethics committee managers. The company has a solid market position with a proven track record processing billions in subsidies and supporting tens of thousands of funding and certification requests. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the website is built on WordPress using modern plugins such as Yoast SEO and Elementor, with Google reCAPTCHA implemented for form security. The site is mobile-optimized and performs moderately well, though there is room for improvement in accessibility and security headers. The domain registration is consistent with the business history and shows no suspicious patterns. From a security perspective, the site uses HTTPS and holds a SOC 2 Type 1 certification, indicating a commitment to security standards. However, the absence of DNSSEC, security headers, and published privacy or cookie policies are notable gaps. No incident response or vulnerability disclosure information is provided, which could be improved to enhance trust and compliance. Overall, the website and business appear legitimate and professional with a moderate to good security posture. Strategic improvements in privacy compliance, security headers, and transparency around incident response would strengthen the security and trustworthiness of the platform.