Not sure if an email is real?
Forward it to us. We’ll check it and reply in seconds with a clear, plain-language verdict.
How it works
No form, no upload. Forwarding an email is the entire interface.
Forward the email
Forward the suspicious email, as-is, to harry@protego.me. Don’t retype it or send a screenshot: forwarding keeps the sender address and headers the checks rely on.
Wait a few seconds
Most replies arrive within seconds. A slower backup check runs every 10 minutes in case the fast path is ever unavailable, so nothing gets missed.
Read the verdict
You get a reply from verify@protego.me with a color-coded risk score (green, orange, or red) and a plain-language breakdown of what was checked.
What we check
Seven signals combine into one score, so one weak signal on an otherwise normal email doesn’t scare you for nothing.
Sender authentication
Does the message actually pass the sender’s own SPF, DKIM, and DMARC checks, or is that missing?
Look-alike domains
Is the sending domain a near-copy of a real brand, like "micros0ft.com" or a brand name hidden inside a longer domain?
Domain age & reputation
Was the sending domain registered days ago? Is it already flagged as malicious by Google Safe Browsing or Spamhaus?
Reply-To mismatch
Does a reply actually go back to the visible sender, or somewhere else entirely?
Display name spoofing
Does the name shown ("Microsoft Support") match the real sending domain, or is it faked?
Links & QR codes
Do the links go where their text claims? Are any known-malicious? QR codes in images are decoded and checked too.
Pressure language
Does the message use urgency ("act now," "24 hours") combined with a request for a password, payment, or personal details?
Your email isn’t kept
Deleted after the check
The email itself, its body, attachments, and any images, is deleted from our mailbox as soon as the check finishes. It doesn’t sit around afterward.
Only usage stats remain
We keep the sender address, sender domain, subject line, and the score, purely to know how many people use the tool and how it’s performing. Nothing else.
Questions
Is this actually free?
Yes. Forward as many suspicious emails as you like to harry@protego.me. There’s no account, no signup, and no payment involved.
What happens to the email after it’s checked?
It’s deleted from our mailbox right after the checks run. We only keep enough to track usage: the sender address, sender domain, subject line, and the score, never the body, links, or attachments.
How fast is the reply?
Usually within a few seconds. There’s also a backup check that runs every 10 minutes in case the fast path is ever unavailable, so a reply always arrives.
Can it be wrong?
It’s a strong first read, not a guarantee. A LOW score means nothing suspicious was found by these specific checks, not that the email is guaranteed safe. When in doubt, verify through a channel you already trust: call the person or company directly using a number you already have, not one from the email.
Does it work for any kind of email?
Yes: personal, work, or anything forwarded to you. It works best when the email is forwarded normally rather than pasted as text, since forwarding preserves the technical details the checks need.
Got a suspicious email right now?
Forward it and you’ll have an answer before you’d have finished reading it a second time.
Forward to harry@protego.me →Own the domain instead of just receiving mail on it? Check Email Security Checker to see if your domain can be spoofed.