Stop Phishing Before the Click

For enterprise IT admins and security operations teams who triage raw mail-server logs. Paste an SMTP log and get an instant phishing risk verdict with flagged senders, links, and attachments — so risky mail is blocked before anyone clicks.

Results update live as you type — no button needed. The Example button fills a sample input.

Why use UEBGuard Email Protection?

Instant phishing risk score and threat verdict from raw SMTP logs

Surfaces authentication failures (SPF, DKIM, DMARC) and lookalike domains

Flags suspicious URLs and dangerous attachments like .exe or double extensions

Provides actionable block recommendations for security teams

No data leaves your browser — all analysis is client-side

FAQ

What log formats are supported?

The tool accepts raw SMTP server logs, email headers, and lines containing URLs or attachment metadata. It parses common patterns like from, to, subject, SPF/DKIM/DMARC results, and file extensions.

How is the phishing risk score calculated?

The analyzer checks for authentication failures, lookalike domains, suspicious TLDs, dangerous attachment extensions, and other threat indicators. Each finding contributes to an overall risk score and verdict.

Is my log data stored or sent anywhere?

No. All analysis happens locally in your browser. Your logs never leave your device.

Can I use this for automated blocking?

The tool provides block recommendations, but it is a diagnostic aid. Always validate findings before configuring automated blocks in your mail gateway.

Example input

Try it with this sample — paste it into the box above:

2024-06-11T09:14:22Z mail-relay-01 smtp[4821]: from=<[email protected]> to=<[email protected]> size=18422 status=sent
2024-06-11T09:14:22Z mail-relay-01 smtp[4821]: header: Received: from unknown (185.220.101.44) by mx.corp.example; SPF=fail DKIM=none DMARC=fail
2024-06-11T09:14:22Z mail-relay-01 smtp[4821]: header: Subject: Urgent: Verify your account within 24 hours
2024-06-11T09:14:22Z mail-relay-01 smtp[4821]: url: http://paypa1-secure.com/verify?token=9f2a
2024-06-11T09:14:23Z mail-relay-01 smtp[4821]: attachment: invoice_0611.pdf.exe size=20480

How to use UEBGuard Email Protection

  1. Enter or paste your data into the Raw SMTP / Email Log box above.
  2. The result appears instantly in the Phishing Risk Analysis box — everything runs in your browser, nothing is uploaded.
  3. Use Copy or Download to keep the result, or Example to load a sample first.

More Security & Forensics tools

🔧

Base64 Strings Extractor - Decode Every Blob in Forensic Text Dumps

Extract and decode every Base64 blob hidden in Cellebrite UFED exports, hex dumps or logs.
🔧

Code Deobfuscator - Decode Obfuscated Code Online

Free online code deobfuscator. Instantly decode URL-encoded obfuscation to reveal readable
🔧

Comcast Bill Analyzer - Compare Bills & Spot Hidden Changes

Compare two Comcast bills, terms, or emails side by side. Instantly highlight differences

🔧

Cron Time Analyzer - Cron Expression to Human Readable

Convert cron expressions to human-readable schedules and get warned about the risky 2-3 AM

Related tools

🔧

EchoSpoofing Email Spoofing Analyzer | SMTP Log Parser

Paste SMTP logs to instantly detect EchoSpoofing and email spoofing red flags. Free analyz
🔧

SMTP Log Encryption Analyzer - TLS & Plaintext Check

Paste SMTP logs to instantly detect encrypted sessions, TLS versions, and risky plaintext

🔧

Email Guard MCP Converter - SMTP Log Analyzer

Convert raw SMTP and email guard logs into a clear security report. Instantly see blocked

🔧

LLM Proxy Log Inspector: Audit Logs & Headers for Leaks

Scan LLM proxy logs and request headers for leaked model names, prompts, and user metadata
🔧

Log Action Analyzer - SMTP Log Parser & Report

Paste raw SMTP or server logs and get a structured action report with anomalies, a key-eve
🔧

Salesforce Phishing Analyzer - SMTP Log & Email Threat Scanner

Analyze SMTP logs and email headers for Salesforce phishing. Extract malicious links, send

← All tools · Security & Forensics