See what this website is leaving open.

Type the address. In about twenty seconds you get a short list: what we saw, what it means, what to do first. Plain language.

No login. Nothing is changed. No card.
We only read what the site and its mail records already show.

You get

  • What we saw on the public site and mail records
  • What that means, in one sentence
  • The first step — and when to ask for help

We do not

  • Log in
  • Change the site
  • Give you a grade
  • Claim we saw backups, passwords, or how you pay people

Old programs on a website can let someone in without a fake invoice.

See an example list

Example — not a real company

  1. The site does not force the lock in the browser.

    People can land on a version that is easier to copy or tamper with on the way.

    What you can do: ask whoever built the site to turn that on. It is a setting, not a rebuild.

  2. No published rule for who may send mail as this name.

    That does not prove anyone is faking you. It means the domain has not told the world which senders are real.

    What you can do: send this line to whoever set up email. Do not flip a strict switch yourself — real mail can stop.

  3. A page that looks like an old invoice folder is open to anyone with the link.

    It is linked from the site, so it is not hidden. Check whether it was meant to be public.

    What you can do: if not, take it down or put it behind a login.

Varnet is a product of iCyber AB, Stockholm. Questions: [email protected]