Abstract: In a method for certifying a website to be malware-free and owned by an entity fulfilling a trust criterion, such as a chartered financial institution, a request can be received via a network. The request can specify a domain name and a site map of the domain name. A processor can validate that all Uniform Resource Locators (URLs) in the site map are devoid of malware and that the domain name is owned by a chartered financial institution. A network-accessible document can certify that the domain name and all URLs in the site map are devoid of malware and that the domain name is owned by the chartered financial institution. The URLs can be validated periodically, and the document can be updated periodically. The document can be a single XML file stored in a centralized location, and can include validations from multiple website owned by respective financial institutions.