Skip to main content

Three places your brand gets faked. All three, watched.

Can someone email your customers as you? Is there a fake version of your store? Do browsers still trust you? One surface per question, with the finding, the checks behind it, and the response Recon prepares.

Scan my store
  • 3 surfaces inbox, storefront, reputation
  • 1,500+ domain endings checked every scan
  • 100+ lookalike versions of your name generated
  • 5 records that decide whether your email is trusted

Inbox

Can someone email your customers as you?

Without a DMARC policy on your domain, anyone can send order emails in your name and they arrive looking real. The same records decide whether your own email reaches the Primary tab or the spam folder. Recon checks all five and shows you the setting that fixes both.

Inbox protection in detail
Primary Promotions Social

NORTHFELL Orders <orders@northfell-shipping.com>

Your order #A4821 has shipped — track your parcel

Thanks for shopping with us. Your order is on its way. Confirm your delivery address to avoid…

9:41 AM

NORTHFELL <hello@northfell.com>

Your receipt from NORTHFELL

Yesterday

Shopify <no-reply@shopify.com>

Your shipping label is ready

Mon
Inbox · unauthenticated sender, delivered clean Spoofable
5
email records checked
All
sending services verified
24/7
monitoring for changes

SPF

Which services are allowed to send as you.

DKIM

A stamp on each message proving it left your systems unchanged.

DMARC

The instruction that turns a spoofed email into a rejected one.

MX

Where your mail actually routes — and whether replies reach you.

MTA-STS

Stops a message being intercepted in transit between mail servers.

Sender coverage

Shopify, Klaviyo, and every service sending in your name.

Storefront

Is there a fake version of your store?

A copy of your storefront on a domain one letter off yours takes your customers’ payments, and the chargeback still lands on you. Recon searches 1,500+ domain endings for it and hands you the evidence to get it removed.

Storefront protection in detail
yourbrand-sale.com
EXTRA 70% OFF EVERYTHING · SALE ENDS TONIGHT
NORTHFELL ShopNewSale

Alpine Down Parka

$340 $102

Merino Base Knit

$120 $36

Field Tote 20L

$95 $28

Storefront · live clone with its own checkout Threat
1,500+
domain endings searched every scan
100+
lookalike variations generated
24/7
monitoring for new clones

Lookalike domains

Typos, swaps, and discount-shaped names.

Typosquats

One letter off yours — the kind a shopper skims past.

Catalog match

Your products and photography, copied.

Redirect chains

Where a domain really sends a shopper.

Payment destination

Whether the money reaches you or the scammer.

Certificate

A fake site can get a padlock in minutes; Recon logs when one does.

Reputation

Know before a browser warns customers away.

A blocklist hit or an expired certificate can turn your store into a red warning screen and get your ads disapproved. Recon watches the signals Chrome and ad platforms check, and alerts you the moment one slips.

Reputation monitoring in detail
yourbrand.com

Connection & site security

Connection is secure
Certificate valid — expires 14 Mar 2027
2 security headers missing — your pages can be framed or misread by a browser
Reputation · secure today, one listing from a warning Attention
24/7
continuous monitoring
3
threat feeds checked by name
No
access to your store needed

Safe Browsing

The signal behind Chrome’s red warning screen.

Threat feeds

Google Web Risk, SURBL and URLhaus — what ad platforms check before you spend.

SSL certificate

Your padlock: who issued it, and when it quietly expires.

Security headers

Whether your pages can be framed or misread by a browser.

DNSSEC

Stops someone forging the answer to “where does this domain live?”

Nameservers & registrar

Early signs someone is taking your domain.

Every finding comes with its fix.

Recon does not hand you a list of problems and wish you luck. If the fix is on your own domain, it writes the exact record and works out who your DNS provider is. If it is someone else's site, it finds the registrar, captures the evidence and writes the notice.

When the problem is yours

Example of the DNS record Recon writes for a missing DMARC policy: the record type, the host it belongs on, and the value to paste, with the merchant's own DNS provider detected from their nameservers. Fictional brand and domain.

Recon writes the record. You paste it — nobody but you can change your DNS.

When it is someone else's site

Example of the abuse notice Recon prepares: addressed to the registrar, quoting the domain, the dates and the matched pages, with an evidence file attached. Fictional brand and domains.

Example notice · synthetic data · the brand, domains and registrar are fictional

Free scan

What is wrong today?

One public-data scan of your domain across all three surfaces. Findings, evidence, and the next move — no account, no card, nothing to install.

Scan my store

Continuous monitoring

What changed after today?

Recon keeps watching and tells you the moment a surface changes — a clone goes live, a policy weakens, a listing appears — with the report and the drafted notice ready. $24/mo, or $220/yr. 14-day free trial.

See what monitoring adds

Check all three surfaces for your store.

One public-data scan across inbox, checkout and reputation — the findings, the evidence, and the next move.

Free · results in minutes · no account required