Decode Outlook SafeLink and security wrapper links to reveal their destination URL.
Loading tool
About Outlook Safelink decoder
Reveals the real destination of wrapped links. It decodes Microsoft Outlook Safe Links, Proofpoint URL Defense v2 and v3, Google and Facebook redirect URLs, and common redirect parameters like url, redirect or next, unwrapping nested wrappers recursively. Paste a whole email body to decode every link at once, optionally keeping the surrounding text. The links are parsed as text and never opened.
Common uses
- See where a link in a suspicious email really points before clicking
- Clean wrapped links before pasting them into documentation or chat
- Recover the original URL from a Proofpoint urldefense.com link
- Decode every link in a forwarded email in one pass
FAQ
- What is an Outlook Safe Link?
- Microsoft Defender for Office 365 rewrites links in email to point at safelinks.protection.outlook.com, with the original address in the url query parameter, so the link can be scanned when clicked.
- Does decoding a link visit it?
- No. The destination is extracted from the wrapper URL's text, so no request is made to the wrapper service or the destination.
- Does unwrapping a link bypass the security check?
- Opening the original URL directly skips the click-time scan your organization's wrapper performs. Use the decoded address to inspect where a link goes, and follow your organization's policy before opening unknown links.