Is secure.ethicspoint.com legit? TrustSniffer's high-trust assessment: 100/100

Overview

The website is a multilingual NAVEX EthicsPoint portal that enables individuals to submit anonymous or confidential reports of unethical or illegal conduct and to follow up on existing reports using a report key and password; it operates as hosted corporate compliance and whistleblower-reporting software funded through organizational service contracts rather than payments from reporters.

Scam/Impersonation Risk

No identity contradictions, brand impersonation, phishing behavior, or other fraud indicators were observed. The organization-search and report-follow-up forms are consistent with the portal’s stated function, and the password field serves an existing-report workflow rather than an unrelated credential request. Long-term domain provenance, historical continuity without suspicious repurposing, and clean external threat-reputation results provide convergent support for the site’s legitimacy.

• Domain-registration records show the domain was registered in 2000 and is approximately 26.22 years old.
• Web archives contain 18 snapshots from 2012-06-02 through 2026-05-16, spanning 15 years of tracked history, with no semantic drift or suspicious repurposing identified.
• The incident-reporting page contains two visible forms—organization search and report follow-up—with no hidden forms or untrusted form destination detected.
• External security checks recorded 0 malicious and 0 suspicious detections, no phishing finding, and no reported infrastructure abuse.

Regulatory Verification Notes

The service presents itself as corporate ethics, compliance, and confidential incident-reporting infrastructure rather than a financial, investment, or brokerage platform. No financial license is claimed, and none would be established merely from the portal’s function. The available content describes anonymity, confidentiality, communication with organizational management or boards, and supporting legal policies; no conflicting legal-entity names or misleading regulatory claims were identified.

• The incident-reporting page identifies NAVEX and EthicsPoint consistently and describes confidential reporting to an organization’s management or board.
• Domain records identify Bob McCarter as the owner and TLDS LLC d/b/a SRSPlus as registrar; registration is valid through 2027-05-19.
• The site’s transport encryption uses a DV certificate issued by Sectigo Public Server Authentication CA DV R36, valid through 2027-02-01.
• The assessed business disclosures contain no claimed financial license, licensing authority, or license number.

What to Verify Next

An intended reporting organization should be selected only through its exact official name, and the organization’s own intranet, policy materials, or independently obtained compliance contact should be used to confirm that EthicsPoint is its authorized reporting channel. Report keys and passwords should be retained securely because they control access to follow-up communications. Before submitting particularly sensitive information, the applicable confidentiality and privacy terms should be reviewed to understand handling, anonymity, and escalation arrangements.

• The landing page requires an organization name before a new report can be initiated.
• Existing-report access requires a report key and password rather than a general user account.
• The portal states that its purpose is safe, honest, anonymous, and confidential communication concerning unethical or illegal activity.

Summary Verdict

The website is a legitimate, established, and trustworthy corporate compliance service. Its identity, operating purpose, provenance, form behavior, and external reputation converge without contradictory risk signals. Normal interaction, including report submission and authenticated follow-up, is appropriate.

Infrastructure Integrity

Incapsula provides the site’s CDN and web-application-firewall layer. All observed addresses were protective edge servers, so the origin was not exposed during the assessment; this reduces direct infrastructure exposure but is a security control rather than independent proof of legitimacy.

• Hosting is served from AS19551 by INCAPSULA – Incapsula Inc., US.
• Four observed addresses were Incapsula edge nodes, with no origin-server candidate exposed.

Closing Assessment

Prospective users may use the portal normally, while following their organization’s established reporting procedures and applying routine safeguards to confidential case-access information.