Safelink Decoder
WebDecode Outlook and Office365 safelink URLs back to the original links in batch. Strip tracking wrappers and recover the real URLs safely, all locally.
Related Tools
About Safelink Decoder
For safety, many mail, IM, and office systems rewrite original links into "safe links", wrapping the real address inside Microsoft Safe Links, Outlook, or Proofpoint URLDefense wrappers, hiding the final destination. This tool recognizes these common wrapper formats locally in your browser, extracts and percent-decodes the nested original URL, and lets you see where a link truly goes before clicking, helping spot phishing. For example, pasting a safelinks redirect reveals the inner destination URL before you click, helping spot phishing.
How to Use
- Open the Safelink Decoder tool
- Enter or paste the content to process
- Adjust the output options as needed
- Click the Run button; results appear in real time
- Copy or export the result
Use Cases
- Spot phishing — Reveal a wrapped link's real domain before clicking to judge if it is malicious.
- Clean mail links — Restore Safe Links-rewritten URLs in email back to clean, shareable originals.
- Trace redirects — Unwrap multi-layer safe wrappers to find the final landing page for debugging.
- Security audit — Batch-restore protected links logged in records to analyze real visit targets.
- Copy original link — Extract the clean URL from a long protective wrapper for archiving or citation.
- Phishing analysis — Unwrap a link in a suspicious email to see the real destination before deciding whether to report it.
- Email automation — Restore clean URLs from Safe Links in automated email parsing pipelines to get the original target.
FAQ
Which safe-link formats are supported?
Common ones include Microsoft Defender Safe Links (safelinks.protection.outlook.com) and Proofpoint URLDefense (urldefense.com v2 and v3). The tool recognizes their parameter structure and extracts the inner real URL.
Is a decoded link automatically safe?
No. Decoding only lets you see the real address; you still must judge whether the target domain is trustworthy. Do not visit unfamiliar or spoofed domains.
Why does URLDefense v3 decode differently?
v3 is not plain percent-encoding but uses custom substitutions for special characters (compressing certain symbols), requiring reversal by its own rules, which this tool has built in.
What if the link is wrapped multiple times?
Sometimes several gateways rewrite a link in sequence. Paste the first decode result back in to peel each layer until you reach a final address with no wrapper traces.
How does it differ from a generic URL decoder?
A generic decoder only does universal percent-decoding, while this tool understands each protection product's proprietary wrapping rules and pinpoints the nested original URL. For pure percent-decoding, use our URL parser tool.