Decode Obfuscated URLs in SMTP Logs Instantly
For network admins, security analysts, and IT pros who monitor email traffic. Paste raw SMTP logs and instantly reveal decoded URLs hidden behind percent-encoding and obfuscation — no manual decoding, no scripts, no guesswork.
Open the ToolWhy use SMTP Log Analyzer?
Automatically detects and decodes percent-encoded and obfuscated URLs in SMTP logs
Works with raw mail server logs, SMTP transcripts, and configuration text
Highlights potential phishing or malicious links hidden in email traffic
No data leaves your browser — analysis runs entirely client-side
Clean, copy-ready output of decoded URLs for reporting and triage
How it works
- Paste your SMTP log or configuration text into the input box.
- Click 'Analyze Log' to scan for obfuscated URLs.
- Review the decoded, human-readable URLs in the output panel.
- Copy the results for incident reports, threat hunting, or further investigation.
FAQ
What kinds of obfuscation does this tool decode?
It decodes percent-encoding (e.g. %70%61%74%68), common URL-encoding variants, and other obfuscation patterns frequently used to hide phishing links in SMTP logs.
Is my SMTP log data sent to a server?
No. All analysis happens locally in your browser. Your log data never leaves your device.
Can I use this for real mail server logs?
Yes. It works with standard SMTP transcripts, Postfix, Exim, Exchange, and other mail server logs, as well as raw SMTP session captures.
Why would URLs be obfuscated in SMTP logs?
Attackers often obfuscate URLs to bypass security filters and evade detection. Decoding them reveals the true destination, helping you identify phishing or malware links.