The Cyber Exposure Score is a published 0–100 formula built only from publicly observable signals. How this is calculated.
Trend: Breach history up 45 since 2026-09-22 (30 days).
Posture summary
Email authentication
SPF ✓ -all DMARC quarantine DKIM ✓ · Microsoft 365 DNSSEC ✗DNS hygiene
4 nameservers single DNS provider CAA ✗ IPv6 ✗Web & transport hygiene
HTTPS redirect ✓ HSTS ✗ CSP ✗ security.txt ✗TLS / certificate
TLS TLSv1.3 96d to expiryInternet exposure
CDN edge — its 2 ports are the CDN's 0 KEVBreach metadata
0 public breaches no leak-site listingDomain & hosting
0 public hostnames registered 1998 AS16509 · AMAZON-02 no blocklist hitsLookalike domains (3 registered of 109 checked, 1 serving no website)
Registered permutations of this domain. Existence is a fact, not an accusation — ownership and intent are not assessed. Those able to receive mail are the ones usable for invoice fraud and phishing. The Risk score (0–100) is a published formula weighing mail capability, registration age, spelling, what the homepage shows and phishing-feed hits, reduced when a name looks brand-owned (same registrar/nameservers, a redirect to this domain) or merely parked. How this is calculated.
| Domain | Type | Mail-capable | Registered | Risk |
|---|---|---|---|---|
| handytac.com | omission | yes | — | 48 high |
| handytrac.net | tld | yes | — | 48 high |
| handytrac.org | tld | yes parked | — | 33 medium |
Recommendations
-
mediumEnable DNSSEC
DNSSEC signing was not detected for this domain.
-
highMonitor lookalike domains
3 registered lookalike domain(s) can receive mail, which is what makes them usable for invoice fraud and credential phishing. 1 of those serves no website at all but can already receive mail, so a reply sent to it would be delivered although nothing is visible in a browser. With no website there is nothing to inspect, so watch for DNS or web changes rather than treating it as harmless. Monitor them and consider defensive registrations.
Sources: Ransomware.live · Have I Been Pwned (CC BY 4.0) · Shodan InternetDB
Refresh this report
Re-run a live analysis or generate a full downloadable audit.
Open live reportAll information is aggregated from public sources for awareness only and does not constitute an accusation or a security assessment. No personal data or credentials are published.