Threat examples and compliance framing adjust per vertical. Re-scanning stonecoldtruth.com preserves your current scores.
Enter a domain, URL, or email address to generate a compliance report.
Overall Compliance Rating
stonecoldtruth.com has gaps that may weaken protection of client confidentiality under TDRPC Rule 1.05. Prioritize the remediation plan below before relying on this configuration as a defensible posture.
This tool uses a weighted algorithm focused on TDRPC Rule 1.05:
-all vs exploitable ~all) and DMARC enforcement including explicit sp=reject subdomain policy and np=reject for non-existent subdomains.mode=enforce (not testing/none), plus TLS-RPT and DNSSEC signals. DNS host, IPv6 dual-stack, and BIMI are shown for guidance and are not primary score drivers.lyncdiscover (Microsoft Lync legacy targets are Info only).Without strict DMARC (p=reject) and SPF (-all), attackers can email clients as your firm:
billing.stonecoldtruth.com or your Managing Partner's exact address tricks a client into wiring funds — intercept real estate or settlement communications and trick clients into wiring funds to offshore accounts.Unlock the full report for every control — MTA-STS, TLS-RPT, DNSSEC, HSTS, CSP, clickjacking, CAA, security.txt, and endpoint risk — each with named incidents and remediation steps.
The paid report adds a step-by-step playbook: Have I Been Pwned check (when you audit by email), MFA rollout, password-manager guidance (we suggest Proton Pass), and Microsoft 365 / Google Workspace compromised-credential settings — plus our breach-monitoring guide if exposure is found.
This summary shows how your public DNS and website settings compare to common TDRPC Rule 1.05 expectations. Unlock the full report for step-by-step remediation guidance, granular DNS data, and the tools below.
What's included in the full report ($99)
Everything below unlocks immediately after checkout—no separate subscriptions.