FanTazTechCheck My Grade

See What a Blindspot Report Shows You

This is the document a scan produces: a grade, the findings behind it in priority order, the evidence for each, and what it takes to fix them. The business below does not exist.

The scan is not open to the public yet. Nothing here is collected in the meantime.

  • No Login
  • No Software
  • No Network Access
  • Public Records Only

Fictional Example. Not a Real Business Scan.

Northstar Dental is an invented practice. Its domain, northstar-dental.example, is reserved for documentation and can never belong to a real company. The findings, counts, and dates are illustrative, and they are internally consistent with how the scanner actually scores a result.

FanTazTech Security Intelligence
Sample

Northstar Dental

northstar-dental.example · External Security Assessment · August 24, 2026

F
33/ 100
Exposures Found
5
Categories Checked
8
Confidence
100%

Summary

A stranger can act against northstar-dental.example today using information that is already public. The items marked Act Now should be closed first.

  • 1Critical
  • 1High
  • 2Medium
  • 1Low

Findings5

  1. Act Now10-minute DNS change

    Anyone can send email that appears to come from you

    Your domain publishes no DMARC policy, so a receiving mail server has no instruction to refuse a forged message. Someone can send an invoice from your address and it will be delivered.

    Evidence
    No DMARC record found at _dmarc.northstar-dental.example
    Remedy
    Publish a DMARC record starting at p=none with a reporting address, read the reports, then move to p=reject.
    Confirmed By
    Two independent DNS resolvers
  2. Act This Weekremote configuration

    Six staff addresses appear in public breach data

    Addresses at your domain appear in datasets anyone can download. The risk is a password reused somewhere that still works.

    Evidence
    6 addresses across 4 sources, most recent 2025
    Remedy
    Force a password reset for the affected accounts and turn on two-step login.
    Confirmed By
    Supported breach dataset
  3. Act This Month10-minute DNS change

    A lookalike domain is configured to receive mail

    A domain one character from yours is registered and has a mail server. That combination is preparation rather than coincidence.

    Evidence
    northstardental.example is registered and has live mail servers
    Remedy
    Publish DMARC at p=reject on your real domain and tell staff to confirm payment changes by phone.
    Confirmed By
    Registration and DNS lookup
  4. Act This Monthremote configuration

    Your certificate expires in 19 days

    When it lapses, visitors see a browser warning telling them the site is unsafe.

    Evidence
    Certificate valid until 2026-09-12
    Remedy
    Renew the certificate, and turn on automatic renewal so this cannot recur.
    Confirmed By
    TLS handshake
  5. Worth Fixing10-minute DNS change

    Any certificate authority in the world can issue for your domain

    Without a CAA record, nothing limits which authority may issue a certificate in your name.

    Evidence
    No CAA record published
    Remedy
    Publish a CAA record naming the authority you actually use.
    Confirmed By
    Two independent DNS resolvers

Every check above reads public records only. This is not a penetration test. No system was accessed, no password was tested, and no software was installed. A finding appears only when it can be confirmed twice.

FanTazTech LLC · [email protected]

How to Read It

  • F

    The Grade Summarizes, It Does Not Replace

    One critical and one high finding remove 48 points between them, before the medium and low items are counted.

  • 8

    Every Category Completed

    All eight ran on this scan, so confidence is full. When one cannot complete, the report names it instead of counting it as a pass.

  • 5

    Findings Come With Evidence

    Each one shows what it means for the business, what was observed, and what fixing it involves.

See How the Grade Is CalculatedSee How Findings Are Confirmed

See This for Your Own Business

The same report, with your findings instead of an invented practice.

The scan is not open to the public yet. Nothing here is collected in the meantime.

We only read public records. We never touch your computers and we never ask for a password.

Explore

Everything Blindspot Checks

Free Tools

Check one thing in about two seconds, no signup.

Understand Your Exposure

What the outside world can already see, and how it is measured.

How Impersonation Works

The techniques behind the findings, in plain English.