NordShield

Check your domain — live, in seconds

Type your business domain and see your grade right here. This is the check scammers hope you never run: can anyone send email pretending to be you?

Live check of public DNS records. Nothing is stored.

Free download: The 10-Second Email Safety Checklist

Print it, pin it by the office computer — five quick checks before you trust any email: the sender's real address, where links really go, surprise money requests, calling a number you trust, and forwarding anything unsure to NordShield.

One page · Opens right here, in the language selected above (EN / FR) — the PDF is one tap inside.

Two services. One job: your email can't be used against you.

Fixed prices in Canadian dollars. No contracts, no jargon, no access to your systems.

Suspicious-Email Hotline

$49 CAD / month

A fake invoice. A “supplier” changing bank details. A password reset that isn't. Your team forwards any email that feels off — I check it and send back a clear verdict:

SAFE SUSPICIOUS PHISHING

Verdict with a one-line reason, within 2 business hours
Up to 20 checks per month, per business
A one-page summary every month: what came in, what was dangerous, one tip for your team
I never ask for your mailbox or passwords — you just forward the email

DMARC Fix — anti-impersonation

$99 CAD, one-time per domain

Right now, without DMARC, anyone on Earth can send email pretending to be your business — fake invoices from your real address, sent to your real clients. Most small businesses have no idea this is open.

I set up SPF, DKIM and DMARC properly for your domain
Rolled out safely — monitor first, then enforce — so your real email never breaks
You get a one-page summary: your domain can no longer be impersonated
The diagnosis is free — I check your domain's public settings and tell you your grade first

Bundle and save: the DMARC fix is $49 when you combine it with the hotline — first payment $98 total, then $49/month.

DMARC Watch

Add-on $19 CAD / month

After your fix, your domain sends a pile of technical DMARC reports every month. Nobody reads them. I do.

Each month, I read your DMARC aggregate reports — the record of who's sending email as your domain.
Quiet month? You get one line: “All quiet — no impersonation attempts this month.”
If the reports show someone trying to send email as your domain, I alert you promptly — with what it means and the next steps.

Add-on — available once your DMARC Fix is in place.

What a verdict looks like

Three examples, in the exact format hotline members get back. The names and amounts are illustrative — the format is real.

Example email “Interac: you received $450 — tap to deposit” PHISHING

Fake sender, fake link, and pressure to tap fast. Delete it.

Example email “Bell: verify your account today” SUSPICIOUS

The sender doesn't fully check out. Don't click — contact Bell directly.

Example email “Desjardins: your statement is ready” SAFE

Real sender, and the links go to the real site.

How it works

Three steps. Nothing to install, nothing to hand over.

1

Forward it

Forward the suspicious email — or just ask for your free domain check.

2

Get a clear answer

A verdict or a diagnosis, in plain language, fast — within 2 business hours for email checks.

3

Stay protected

Month to month, your inbox gets a second pair of eyes — and scammers can't send email as you.

About

Jad Kdouh — cybersecurity student in Montréal. NordShield is a one-person service, and that's the point: you always deal with the same person, and the price reflects it.

Everything is in writing. Verdicts only — I don't log into your systems, and I never ask for a password. If something is outside what this service covers, I'll say so plainly and point you the right way instead of bluffing.

Why hire a student?

Fair question. Here's the honest answer — in writing, like everything else here.

I never ask for your passwords or account access — ever
Every verdict in writing, nothing verbal
Cybersecurity student at CDI College, Montréal — this is my field, full-time
If I don't know something, I say so — and tell you who does
$49/month, not IT-firm prices

Questions

Do you need our passwords or access to our mailbox?

Never. You forward the email you're unsure about — that's all I ever look at. Be wary of anyone who asks for more.

How fast do we get an answer?

Within 2 business hours for email checks. The DMARC diagnosis is free and usually comes back the same day.

What languages do you work in?

English and French — whichever your team prefers, switch any time.

We already have an IT company. Do we still need this?

Often, yes. This covers the email layer most IT setups leave open — and the DMARC diagnosis is free, so you can see exactly where your domain stands before deciding anything.

How do we pay?

By Interac e-transfer. Everything is agreed in writing by email first — service, price, and what's included. Cancel the monthly service any time.

What counts as one check?

Each suspicious email you forward = one check. You get the verdict (SAFE / SUSPICIOUS / PHISHING) + a one-line reason, within 2 business hours.

What if I get more than 20 suspicious emails in a month?

Tell me and we agree on the extra in advance, fairly — no surprise bills, ever.

Do you ever look inside my mailbox?

Never. You forward only the emails you choose. No passwords, no mailbox access, no exceptions.

What is DMARC Watch?

An add-on that only exists after a DMARC Fix. Once your domain is protected, the mail providers automatically email technical DMARC reports about who's sending as your domain. I read them every month for you — a one-line all-clear in quiet months, or a prompt alert if someone tries to impersonate you. No mailbox access needed.