SafeLinks Decoder | Proofpoint URL Decoder

SafeLinks decoder that unwraps Outlook Safe Links and Proofpoint URL Defense v1, v2 and v3 links to show the real URL without clicking it. Works offline.

Also known as: safelinks decoder · safe links decoder · proofpoint url decoder · urldefense decoder · decode safelinks url · outlook safe links decoder · proofpoint url defense decoder · urldefense.com v3 decoder · unwrap email links · microsoft defender safe links decoder

url and link tools

email tools

ssl and security tools

decoders

Wrapped Links or Email

Decoded Links

The real destination of every wrapped link will appear here, shown as text so nothing is opened.

About SafeLinks Decoder

SafeLinks Decoder is used to see where a rewritten email link really goes before anyone clicks it. Microsoft Defender Safe Links, Proofpoint URL Defense and other email security gateways wrap every link in a redirect, which hides the destination behind a long encoded URL. Paste the link or the whole message and the tool unwraps each layer offline, then checks the destination for common phishing tricks.

Key Features

Decodes Microsoft Safe Links from Outlook, Teams and the GCC High and DoD clouds (office365.us)
Decodes Proofpoint URL Defense v1, v2 and v3 links, including urldefense.us government links
Unwraps nested links layer by layer, such as a Safe Link around a Proofpoint link around a Google redirect
Reads the Safe Links data field for the recipient address, the tenant ID and a timestamp, all decoded offline
Flags lookalike tricks: text before @, raw or disguised IP hosts, punycode domains, javascript: and data: links
Defang toggle rewrites results as hxxps://example[.]com for SOC tickets, Slack and Jira

Use Cases

Triage a reported phishing email in a SOC queue without detonating the link
Answer a help desk ticket asking whether an urldefense.com link from a vendor is safe
Recover the original URL from a Safe Link pasted into a Jira ticket or a GitHub issue
Check where a university or hospital mailbox link goes before forwarding it to a colleague
Strip wrapping from links copied out of Outlook so a shared doc points at the real page
Pull every destination out of an .eml export from Gmail or Outlook during an incident review

Supported Formats

Microsoft Safe Links

Teams Safe Links

Proofpoint v1, v2, v3

Google, Bing, DuckDuckGo

Facebook, LinkedIn, Slack, YouTube

Barracuda, Sophos, Symantec

Trellix, Avanan, Cisco

Mimecast (domain hint only)

.eml

.html

.txt

Related Keywords

safelinks decoder

safe links decoder

proofpoint url decoder

urldefense decoder

decode safelinks url

outlook safe links decoder

proofpoint url defense decoder

urldefense.com v3 decoder

unwrap email links

microsoft defender safe links decoder

What is urldefense.com and is it safe to decode these links?

urldefense.com is Proofpoint's link-rewriting service, not a phishing site. When a company or university uses Proofpoint, every link in incoming mail is rewritten to pass through urldefense.com, so Proofpoint can check the destination at the moment of the click and block it if it turns bad later. Microsoft Safe Links does the same through safelinks.protection.outlook.com. Decoding a wrapped link only reads the destination that is already written inside it; it does not visit the site or tell the vendor. That makes it safe to look, but clicking the decoded URL directly skips the protection the wrapper provides, so only open it if you trust it. A wrapper also proves nothing about the destination: attackers send malicious links that get wrapped like any other. Mimecast and some other gateways store the destination on their servers instead, so those links cannot be decoded offline.

Privacy & Security

All processing happens locally in your browser. Your data never leaves your computer, ensuring complete privacy and security.

Liked this tool?

DevToolLab is free to use. If this decoder saved you some time today, please consider supporting our work.

Buy us a coffee ☕

Frequently asked questions

What is SafeLinks Decoder used for?

SafeLinks decoder that unwraps Outlook Safe Links and Proofpoint URL Defense v1, v2 and v3 links to show the real URL without clicking it. Works offline.

Is SafeLinks Decoder free to use?

Yes. SafeLinks Decoder is completely free with no usage limits, and there is no paid tier required to use it.

Do I need an account to use SafeLinks Decoder?

No. SafeLinks Decoder works immediately in your browser with no signup, login, or email address required.

Related Tools

JWT Decoder | Decode JSON Web Tokens Online Free

Decode JSON Web Tokens (JWT) to view header, payload, and signature. Check token expiration and validate JWT format. Free, secure, and privacy-first.

json tools

encoding and decoding tools

Base64 to Image Decoder Online | Decode Base64 Image

Convert Base64 strings to images instantly. Visualize Base64 image data and download as image files. Support for PNG, JPG, GIF, WebP, and SVG.

text tools

image tools

Snowflake ID Decoder | Discord, Twitter/X & Instagram ID to Timestamp

Decode Discord, Twitter/X, and Instagram snowflake IDs into timestamps and worker IDs instantly in your browser. Free, no signup, bulk decoding supported.

encoding and decoding tools

date and time tools

More Tools You Might Like

Pastebin Online | Share Code & Text Snippets Free

Popular

Share code snippets, logs, and text with a shareable link. Syntax highlighting for 30+ languages, expiration controls, and password protection for Pro users.

text tools

password and key generators

math calculators

utilities

Use Tool

URL Tracker & Link Shortener | Track Clicks

Popular

Create short, trackable URLs with detailed click analytics. Track visitor location, devices, referrers, and more. Password protection & QR codes included.

text tools

password and key generators

url and link tools

networking

Use Tool

Webhook Receiver & Inspector | Test HTTP Webhooks

Popular

Generate a unique URL to easily test, receive and inspect HTTP webhooks in real-time. View request headers, query parameters, JSON payloads, and more.