Heads-Up Display (HUD) Overview for Shield by Mailprotector
The Heads-Up Display (HUD) in Mailprotector's Shield email security product provides real-time, color-coded indicators at the top of every email to quickly identify safe versus suspicious messages, automatically updates risk or trust levels after delivery, and offers one-click access to detailed analysis via the X-ray feature for enhanced user decision-making.
Never open an email without a heads-up again
Every email in Shield includes a Heads-Up Display (HUD) at the top. Color-coded indicators show what's safe and what's suspicious at a glance. And if risk or trust levels change after a message lands, the HUD updates automatically for more informed decision making. It also serves as one-click access to X-ray—more on that next.
IT
IT Service Desk
Action required: Verify your account details2:47 PM
IT Service DeskAction required: Verify your account detailsWe've detected that your account information may be out of date.2:47 PM
MS
Microsoft Account Team
Urgent: Unusual sign-in detected on your account11:55 AM
Microsoft Account TeamUrgent: Unusual sign-in detected on your accountWe detected a sign-in from an unrecognized device in Lagos, Nigeria.11:55 AM
MT
Michael Torres
Re: Q1 Budget Review — Looks Good10:23 AM
Michael TorresRe: Q1 Budget Review — Looks GoodJust reviewed the updated numbers — everything looks solid.10:23 AM
DD
Billing — Datadog
Your invoice #INV-20482 is ready8:02 AM
Billing — DatadogYour invoice #INV-20482 is readyYour invoice for the period Feb 1–28, 2026 is now available in your portal.8:02 AM
Action required: Verify your account details
IT
IT Service Desk2:47 PM
To: me
MODERATE SECURITY RISKSpam
Hello,
We've detected that your account information may be out of date. To avoid disruption to your services, please verify your details using the link below within 24 hours.
Verify my account
If you did not request this, you can safely ignore this message.
IT Service Desk
Inbox
MT
Michael Torres[email protected]
Trusted
Re: Q1 Budget Review — Looks Good
10:23 AM
TRUSTED FORInbox Delivery
Safe preview
Hey Sarah,
Just reviewed the updated numbers — everything looks solid. I've approved the infrastructure line items and looped in Dana on the headcount request.
See you at the 2pm sync.
— Mike
InsightsLinksFilesDetailsTimeline
Sent from the
United States
This email was sent from a trusted region.
Signature is
Authentic
This email is digitally signed by acmecorp.com.
Sent from an
Authorized source
The source of this message is authorized to send email for acmecorp.com.
Scanned for
Spy trackers
0
Your privacy is protected. No trackers found in this email.
This is your first email from this sender. Do you want to Trust or Silence them?
Trust
Silence
Inbox
AP
Amanda Park[email protected]
New Sender
Quick intro — think we could work well together
3:31 PM
MESSAGE FROM A New Sender
Safe preview
Hi,
I came across your company while researching MSPs in the region and wanted to reach out directly. We help IT teams reduce onboarding time by around 40% — happy to share a quick case study if that's relevant to what you're working on.
Worth a 15-minute call?
Amanda Park
Veritas Partners
InsightsLinksFilesDetailsTimeline
Sent from the
United States
This email originates from a familiar region.
Signature is
Authentic
This email is digitally signed by veritas-partners.co.
Sent from an
Authorized source
The source of this message is authorized to send email for veritas-partners.co.
Scanned for
Spy trackers
0
Your privacy is protected. No trackers found in this email.
Junk Email
DD
Billing — Datadog[email protected]
Silenced
Your invoice #INV-20482 is ready
8:02 AM
LOW SECURITY RISKBulk
Safe preview
Hi there,
Your invoice for the period Feb 1–28, 2026 is now available in your Datadog billing portal. Total due: $1,284.00 on March 15, 2026.
Log in to view or download your invoice.
Datadog Billing
InsightsLinksFilesDetailsTimeline
Sent from the
United States
This email was sent from a trusted region.
© Stadia Maps © OpenMapTiles © OSM contributors
About origin
A lot of bad email comes from foreign countries, so tracing the origin can be one of the quickest and easiest ways to tell if an email is safe.
This email was sent from the United States, which is a typical delivery region.
Message appears to be
Bulk email
This message appears to be bulk or unwanted email.
About Bulk
Bulk email comes in many forms including advertising, newsletters, and other automated emails. This message looks like a bulk or automated email.
Occasionally, email you want will be bulk email. If this is from a wanted sender, you can trust them to always receive their messages. If you never want to receive email from this sender, you can silence them.
Signature is
Authentic
This email is digitally signed by mail39.wdc01.mcdlv.net.
About signatures
Senders can use a digital signature to mark an email as authentic. Think of it as the digital version of a wax seal on an envelope.
The signature on this email was valid for mail39.wdc01.mcdlv.net. This indicates that the email has not been spoofed or tampered with, kind of like an unbroken wax seal.
Sent from an
Authorized source
The source of this message is authorized to send email for mail39.wdc01.mcdlv.net.
About email source
Organizations publish a list of sources that are allowed to send email. Being aware of the source can be helpful when determining if a sender is legitimate.
The source of this message is an authorized sender for mail39.wdc01.mcdlv.net.
However, it's worth noting that the sender domain that authorized this source is not the same as the domain that shows in the from address (mail39.wdc01.mcdlv.net). This may be for legitimate reasons or it may be an attempt to hide the true sender.
Found and blocked
Spy trackers
1
Your privacy is protected. Shield blocked 1 tracker in this email.
What is this about?
Spy trackers embedded in email can report back to the sender with information like if you opened the email, when you opened it, where you are located, and how you opened it. Shield blocked these trackers to protect your privacy.
Junk Email
IT
IT Service Desk[email protected]
Silenced
Action required: Verify your account details
2:47 PM
MODERATE SECURITY RISKSpam
Safe preview
Hello,
We've detected that your account information may be out of date. To avoid disruption to your services, please verify your details using the link below within 24 hours.
Verify my account
If you did not request this, you can safely ignore this message.
IT Service Desk
InsightsLinksFilesDetailsTimeline
Sent from
Pakistan
This email was sent from a untrusted region.
© Stadia Maps © OpenMapTiles © OSM contributors
About origin
A lot of bad email comes from foreign countries, so tracing the origin can be one of the quickest and easiest ways to tell if an email is safe.
If you don't think the IT Service Desk would have sent you an email from Pakistan, be extra cautious if you open or reply to this message.
Message appears to be
Spam
This message appears to be spam.
About Spam
Spam comes in many forms including advertising, phishing, malware, and scams. It's often sent in bulk. This message looks like spam but it's not obvious.
Occasionally, email you want will look like spam. If this is from a legitimate sender, you can trust them to always receive their messages. If you never want to receive email from this sender, you can silence them.
Source has a
Bad reputation
This message came from a server that has a bad reputation for sending abusive email.
About reputation
When an email comes from a server with a bad reputation, it is often because the server has been compromised and is being used to send spam without the owner's knowledge. It can also be because the server is intentionally sending spam. Either way, this is a bad sign.
Signature is
Authentic
This email is digitally signed by billut.com.
About signatures
Senders can use a digital signature to mark an email as authentic. Think of it as the digital version of a wax seal on an envelope.
The signature on this email was valid for billut.com. This indicates that the email has not been spoofed or tampered with, kind of like an unbroken wax seal.
Sent from an
Authorized source
The source of this message is authorized to send email for billut.com.
About email source
Organizations publish a list of sources that are allowed to send email. Being aware of the source can be helpful when determining if a sender is legitimate.
The source of this message is an authorized sender for billut.com.
Found and blocked
Spy trackers
1
Your privacy is protected. Shield blocked 1 tracker in this email.
What is this about?
Spy trackers embedded in email can report back to the sender with information like if you opened the email, when you opened it, where you are located, and how you opened it. Shield blocked these trackers to protect your privacy.
Jailed
RH
Robert Harmon[email protected]
New Sender
Quick favor — need you to handle something
11:55 AM
High Security RiskImpersonated sender
Safe preview
Hey — I'm in back-to-back meetings all afternoon and can't make calls. Need you to take care of a vendor payment for me before EOD. It's time-sensitive.
I'll explain everything later but just need you to initiate the wire now so we don't miss the window. Details are in the instructions below.
View payment instructions
Don't loop in anyone else on this yet — I'll brief the team once it's done. Thanks for handling it.
— Rob
InsightsLinksFilesDetailsTimeline
Sent from
Singapore
This email was sent from an untrusted region.
© Stadia Maps © OpenMapTiles © OSM contributors
About origin
A lot of bad email comes from foreign countries, so tracing the origin can be one of the quickest and easiest ways to tell if an email is safe.
If you don't think Robert Harmon would have sent you an email from Singapore, be extra cautious if you open or reply to this message.
Message from an
Impersonated sender
This message claims to be from Robert Harmon, but it's not really him.
About email impersonation
Email impersonation is a deceptive technique where an attacker disguises the source of an email to make it appear as if it is coming from a different sender. It is commonly used for phishing scams or to distribute malware by tricking recipients into believing the email is legitimate.
Message appears to be
Spam
This message appears to be spam.
About Spam
Spam comes in many forms including advertising, phishing, malware, and scams. It's often sent in bulk. This message looks like spam but it's not obvious.
Occasionally, email you want will look like spam. If this is from a legitimate sender, you can trust them to always receive their messages. If you never want to receive email from this sender, you can silence them.
Sent from an
Unauthorized source
The source of this message is unauthorized to send email for acmecorp.com.
About email source
Organizations publish a list of sources that are allowed to send email. Being aware of the source can be helpful when determining if a sender is legitimate.
This email came from a source that is NOT on the list of senders for acmecorp.com.
Also, the sender domain is not the same as the domain that shows in the from address (acmecorp.com). This may be an attempt to hide the true sender on a forged email.
Source has a
Bad reputation
This message came from a server that has a bad reputation for sending abusive email.
About reputation
When an email comes from a server with a bad reputation, it is often because the server has been compromised and is being used to send spam without the owner's knowledge. It can also be because the server is intentionally sending spam. Either way, this is a bad sign.
Found and blocked
Spy trackers
3
Your privacy is protected. Shield blocked 3 trackers in this email.
What is this about?
The trackers embedded in this email can report back to the sender with information like if you opened the email, when you opened it, where you are located, and how you opened it. Shield blocked these trackers to protect your privacy.
Frequently Asked Questions
What's with the colors and icons?
The HUD uses colors and icons to signal risk at a glance. The same icons carry over into X-ray, where each one is paired with a plain-language explanation. Over time, this approach helps users learn better security habits organically using the real emails they receive every day.
- High risk: impersonation, phishing, obvious spam
- Moderate risk: poor IP reputation, header mismatches
- Low risk: bulk or unwanted mail
- Positive: trusted senders or healthy indicators
What email clients does the HUD work in?
All of them, without apps or plugins.
Is the HUD visible to anyone else?
No. The HUD is only visible to the message recipient. It's part of how Shield displays information to each user individually, and it disappears automatically on replies and forwards.
Can the HUD be turned off?
While we do not recommend doing so, the HUD can be turned off by an admin if circumstances require.
Want to see Shield in action?
Say when and we'll be in touch with next steps.