Weekly no-login security check of a small business's website and email: HTTPS, headers, SPF/DMARC, blocklists, lookalike domains, with a P0/P1/P2 fix list.