Free scan
What is wrong today?
One public-data scan of your domain across all three surfaces. Findings, evidence, and the next move — no account, no card, nothing to install.
Scan my storeCan someone email your customers as you? Is there a fake version of your store? Do browsers still trust you? One surface per question, with the finding, the checks behind it, and the response Recon prepares.
Scan my storeInbox
Without a DMARC policy on your domain, anyone can send order emails in your name and they arrive looking real. The same records decide whether your own email reaches the Primary tab or the spam folder. Recon checks all five and shows you the setting that fixes both.
Inbox protection in detailSPF
Which services are allowed to send as you.
DKIM
A stamp on each message proving it left your systems unchanged.
DMARC
The instruction that turns a spoofed email into a rejected one.
MX
Where your mail actually routes — and whether replies reach you.
MTA-STS
Stops a message being intercepted in transit between mail servers.
Sender coverage
Shopify, Klaviyo, and every service sending in your name.
Storefront
A copy of your storefront on a domain one letter off yours takes your customers’ payments, and the chargeback still lands on you. Recon searches 1,500+ domain endings for it and hands you the evidence to get it removed.
Storefront protection in detailAlpine Down Parka
$340 $102
Merino Base Knit
$120 $36
Field Tote 20L
$95 $28
Lookalike domains
Typos, swaps, and discount-shaped names.
Typosquats
One letter off yours — the kind a shopper skims past.
Catalog match
Your products and photography, copied.
Redirect chains
Where a domain really sends a shopper.
Payment destination
Whether the money reaches you or the scammer.
Certificate
A fake site can get a padlock in minutes; Recon logs when one does.
Reputation
A blocklist hit or an expired certificate can turn your store into a red warning screen and get your ads disapproved. Recon watches the signals Chrome and ad platforms check, and alerts you the moment one slips.
Reputation monitoring in detailConnection & site security
Safe Browsing
The signal behind Chrome’s red warning screen.
Threat feeds
Google Web Risk, SURBL and URLhaus — what ad platforms check before you spend.
SSL certificate
Your padlock: who issued it, and when it quietly expires.
Security headers
Whether your pages can be framed or misread by a browser.
DNSSEC
Stops someone forging the answer to “where does this domain live?”
Nameservers & registrar
Early signs someone is taking your domain.
Recon does not hand you a list of problems and wish you luck. If the fix is on your own domain, it writes the exact record and works out who your DNS provider is. If it is someone else's site, it finds the registrar, captures the evidence and writes the notice.
Recon writes the record. You paste it — nobody but you can change your DNS.
Example notice · synthetic data · the brand, domains and registrar are fictional
Free scan
What is wrong today?
One public-data scan of your domain across all three surfaces. Findings, evidence, and the next move — no account, no card, nothing to install.
Scan my storeContinuous monitoring
What changed after today?
Recon keeps watching and tells you the moment a surface changes — a clone goes live, a policy weakens, a listing appears — with the report and the drafted notice ready. $24/mo, or $220/yr. 14-day free trial.
See what monitoring addsOne public-data scan across inbox, checkout and reputation — the findings, the evidence, and the next move.