Sender Registry
Forward it.
Search it.
Verify it.
Sender Registry is a business email intelligence network. Forward a suspicious email and get a real, evidence-based assessment back. Free, in minutes. Search the registry for a sender, domain, or campaign. Verify an important request before your business acts on it.
Forward any suspicious email to that address. No account needed. See how it works →
Ask the network: has anyone seen this?
Search a sender, domain, subject line, or campaign. Sender Registry checks the network's own report history, related campaigns, risk history, and connected infrastructure. It shows its full record, not just a single verdict.
A sender that's never been seen before is not automatically marked safe. Human beings have already invented enough ways to abuse a green tick.
Verify before your business acts.
Changed bank details. An "urgent" payment request. A supposed supplier instruction. Sender Registry runs a focused check for supplier impersonation, lookalike domains, unusual sender relationships, and campaign history. All before money moves, not after.
Try it yourself.
Search a domain below and see the kind of record Sender Registry keeps. A live example, not your own data.
Seen in 4 reports across 3 independent organisations. First seen 11 days ago, last seen yesterday. Impersonates a document-signing review request.
Sign in to see the full record →No suspicious reports against this domain in the network. That's not the same as a guarantee of safety. It means the network hasn't seen anything concerning yet. Sender Registry never marks an unseen sender as "safe."
Beyond one email. Understand the operation.
A single suspicious email may look isolated. Across a network, it's often the first visible part of a much larger campaign.
Recurring monitoring, not a one-off check.
Supplier Watch monitors important supplier domains and identities. Executive Watch looks for external emails impersonating your directors and finance staff. Brand Watch tells you when the network sees attacks impersonating your own company. Domain Lookalike Radar watches for confusingly similar domains, before anyone's been phished with them.
My Exposure shows campaigns and threats connected to your organisation specifically. Not generic threat news. Threats Like Yours highlights activity being reported by similar businesses right now.
Watch an attack unfold, then see the whole family.
99% fingerprint match to a separately-named campaign. Same infrastructure, same templates, different domain.
While you were away, 3 campaigns relevant to your business emerged.
→ 3 active campaigns, 1 ELEVATED
The network keeps working after you've stopped looking.
An assessment isn't a one-time verdict. If the network later resolves what an earlier email really was, Sender Registry reaches back and tells you.
Not enough network evidence yet to be certain either way. Not the same as "safe."
Two other organisations independently reported the same sender. Your earlier assessment is linked, and you're alerted automatically.
What Sender Registry investigates.
Every forwarded email is broken down into real evidence, not a black-box score.
See the full capability tour →Built on evidence, not a verdict you have to trust blindly.
Risk, Confidence, Network Confirmation: always separate
Never collapsed into one traffic-light score. You see how dangerous something looks, how certain we are, and how much of the network has corroborated it. Three different questions.
"Not previously seen" is never "safe"
An absence of network history means the network hasn't built enough intelligence yet. Not that something has been cleared. We say so explicitly, every time.
Every claim shows its working
Timestamps, first seen, last seen, evidence freshness, and a plain-English reason for every contribution to a score. Expandable, never hidden behind the number.
Start free. Upgrade when you need the network.
No hidden tiers, no "contact sales" wall on the basics.
Free
Forward an email, get a real answer.
- Forward suspicious emails for a free assessment
- Risk, Confidence & Recommended Action
- Block This Sender instructions
- 1 seat
Observed
For a small business ready to search the network.
- Everything in Free
- Registry Search & full Registry Records
- Campaigns, Replay, Threat DNA, Intelligence Map
- Report history & generic Watch
- 3 seats
Corroborated
For a growing business that wants to get ahead of threats.
- Everything in Observed
- Business Watch: Supplier, Executive, Brand, Lookalike
- My Exposure & Threats Like Yours
- Briefings, Board & Insurance Reports
- 10 seats
Verified
For MSPs and teams who need to integrate.
- Everything in Corroborated
- Threat API & webhooks
- Higher rate limits
- Priority support
- 25 seats
Tier names and prices are an early proposal and may change before launch.
| Compare plans | Free | Observed | Corroborated | Verified |
|---|---|---|---|---|
| Forward & assess emails | ||||
| Registry Search & Records | – | |||
| Campaigns, Replay, Threat DNA, Intelligence Map | – | |||
| Business Watch (Supplier/Executive/Brand/Lookalike) | – | – | ||
| My Exposure & Threats Like Yours | – | – | ||
| Briefings, Board & Insurance Reports | – | – | ||
| Threat API & webhooks | – | – | – | |
| Seats included | 1 | 3 | 10 | 25 |
What to look out for.
Five signals worth checking for in any message that feels slightly off.
A claimed authority
Does the message claim to be your bank, a supplier, a government department, or someone senior in your own organisation?
Manufactured urgency
Are you being told to act "within 24 hours" or "immediately", or threatened with a consequence if you don’t?
An emotional pull
Does it make you anxious, hopeful, or curious enough to act before thinking it through?
Scarcity or an unusually good offer
Is it dangling something in short supply, or a deal that seems too good to check first?
A hook into current events
Does it reference something genuinely in the news, or a predictable seasonal moment such as a tax deadline, to seem timely and relevant?
Before you act: verify using a contact method you already know and trust, such as a number from a previous invoice, or the organisation's own website. Never a number or link provided in the suspicious message itself.
Your Sender Registry, one tap away.
Add it to your home screen and open it like any other app. Full-screen, no app store, installing in seconds.