Overview
Last 30 days · all mailboxes
Mail traffic
Scanned vs. blocked, per day
- Scanned
- Blocked
Top blocked senders
- ppaypa1-billing.co214
- ddocs-share.link166
- wwallet-sync.click127
- qqr.secure-verify.top89
- bbank-notice.support48
Threat types
- Phishing46%
- Malware links24%
- Impersonation17%
- Spam waves13%
Mailboxes
Click a column header to sort.
| Status | |||
|---|---|---|---|
| sara@lumen.example | 9,120 | 702 | Protected |
| hello@lumen.example | 6,544 | 489 | Protected |
| billing@lumen.example | 2,788 | 93 | Forwarding paused |
Protection
Every change applies and saves instantly.
Threat intelligence
Lists refresh every minute and apply to every mailbox in this workspace.
Threat intelligence feeds Recommended
Blocks senders and links seen in active campaigns.
Check links at click time
Links are re-checked when opened, not only at delivery.
Block lookalike domains
Addresses like lurnen.example posing as lumen.example.
Newly registered domains
Domains younger than 30 days are often built for an attack.
Quarantine locked archives
Archives that can't be scanned are held for review.
Privacy
Stops senders from learning when and where you read.
Strip tracking pixels
1×1 images and open beacons.
Proxy remote images
Your IP address stays private.
Clean links
Removes tracking parameters from links.
Quarantine
Retention
Held messages are deleted after this period.
Daily digest
Email a list of held messages every morning.
Rules
The allowlist always wins over the denylist.
Denylist
Mail from these senders or domains is never delivered.
- deals.shopflash.example
- *.newsletter-blast.io
- noreply@coupons.example
Allowlist
These senders are never quarantined.
- *.lumen.example
- invoices@northwind.example
Logs
A live stream of decisions — only sender, time and verdict are kept.
Nothing matches these filters.
Settings
Workspace details and notifications.
Delete workspace
All rules and logs are permanently erased.