Security layer for the creator inbox
Is that sponsorship email real, or after your channel?
Paste the offer. Get a verdict backed by evidence in seconds: Legit, Suspicious, or Scam, plus what the deal should pay and the reply to send.
The check
Six forensic checks, one clear verdict
A deterministic rules engine runs the checks a security analyst would run by hand. Language analysis explains the result; it can add red flags, never overrule upward.
Who really sent it
Domain registration age, mail records, SPF and DMARC, reply-to routing. A fresh domain wearing a famous name fails here.
nordvpm.com · registered 25 days agoBrand impersonation
The claimed brand is checked against a registry of 200-plus real sponsor domains: one-keystroke typos, lookalike characters, and bolted-on words.
n0rdvpn.com != nordvpn.comWhere the links go
Every link is extracted and inspected: shorteners, raw IPs, punycode, and anchor text that says one domain while the link goes to another.
text: nordvpn.com → vpn-creator-hub.comWhat is attached
Executables, scripts, disk images, and the signature move of channel theft: a password-protected archive with the password in the email.
Campaign_Brief.zip · "password is 2026"How it talks
Advance fees, cover-the-shipping schemes, crypto payouts, moves to Telegram, manufactured urgency, and offers sized to switch your judgment off.
"$25,000, respond within 24 hours"What the deal should pay
A fair-rate range for your channel size and niche, from real CPM bands, so you can counter with a number instead of a guess.
20,000 avg views · tech · $500 to $1,200Scam database
The campaigns hitting creator inboxes right now
Verified, dated write-ups of the exact scams targeting channels, with the tells that give each one away. Run any of them through the checker and it matches.
Or just forward it
Forward any offer to the address on the right and the verdict lands back in your inbox with a link to the full report.
Why trust it
Built by security people, on your side of the inbox
LegitSponsor comes from a decade of security infrastructure work. Fake sponsorships are the top way YouTube channels get stolen; the tooling to catch them lived inside security teams. Now it reads your inbox instead of a corporation's.
Evidence, not vibes
Every verdict shows its work: the records checked, the values found, and what each one means. You can verify all of it yourself.
Wrong in the safe direction
When evidence is thin the verdict is Suspicious, never Legit. A Legit verdict needs a verified cryptographic signature, so a forged brand address can never pass.
Your emails stay yours
Checks are private, share pages are redacted by default, raw content is deleted on a 90 day clock, and nothing is sold or used for training.