FAQ

Common questions about SMTP Log Analyzer.

What kinds of obfuscation does this tool decode?

It decodes percent-encoding (e.g. %70%61%74%68), common URL-encoding variants, and other obfuscation patterns frequently used to hide phishing links in SMTP logs.

Is my SMTP log data sent to a server?

No. All analysis happens locally in your browser. Your log data never leaves your device.

Can I use this for real mail server logs?

Yes. It works with standard SMTP transcripts, Postfix, Exim, Exchange, and other mail server logs, as well as raw SMTP session captures.

Why would URLs be obfuscated in SMTP logs?

Attackers often obfuscate URLs to bypass security filters and evade detection. Decoding them reveals the true destination, helping you identify phishing or malware links.