SAFE

No threats detected

All checks passed. This site appears legitimate — but always stay alert for phishing even on trusted domains.

Security Review

Is deu01.safelinks.protection.outlook.com legit or a scam?

This looks safe to use.

Microsoft Outlook Safe Links warning page that blocks access to a flagged malicious destination.

Cross-checked against 9 independent sources — none raised a concern
deu01.safelinks.protection.outlook.comScanned Jul 15, 2026
0/100
Trust score
0 = danger · 100 = safe
SAFE
Score breakdown
Heuristics 91·MT 95
Screenshot of deu01.safelinks.protection.outlook.comSee the live page ↓
Positive signals (5)
Antivirus clearNot on major blacklistsDomain is 32 years oldEncrypted connectionClean server reputation
View density

Analysis Summary

Threat Intelligence
0/92
All engines report clean
Domain Age
32 years old
Registered Aug 18, 1994

Website Preview

Screenshot of deu01.safelinks.protection.outlook.com
SCAN-TIME CAPTURE
deu01.safelinks.protection.outlook.com

Automated page render — captured in a safe sandbox. What an ordinary visitor would see when loading the site.

Visual analysis

We capture a fresh screenshot of the live page and ask a vision model to look for scam visual patterns — fake trust badges, countdown timers, overlay pop-ups, and visual clones of legitimate brands.

0
/ 100
No visual red flags

No scam visual patterns detected

This page appears to be a legitimate security warning generated by the Outlook platform after a user clicks a link deemed unsafe.

Visual risk0/100

What our vision model saw

2 signals

The page displays a standard Outlook security warning indicating a blocked link

The interface is consistent with official Microsoft/Outlook security redirection pages

Intelligence

Advanced threat intelligence
Analysis
Low scam likelihoodengineMT · Guardiantrust95/100
MT AgentLive web researchVisual inspection
0%
Confidence
The domain deu01.safelinks.protection.outlook.com is a legitimate Microsoft service used for email link protection. It has a 31.9-year history, valid Microsoft-issued SSL, and zero detections across 92 antivirus engines. The page content matches the official Outlook security warning interface exactly. Our web research confirms this is a real-time URL scanner that rewrites and checks links in Office 365 emails. The actual destination URL contains suspicious patterns and was correctly flagged by Microsoft's filters. No scam reports or complaints exist against this Microsoft domain.
Risk Factors
2
  • The underlying destination link was flagged by Microsoft's security filters as potentially harmful.
  • The destination domain shows unusual patterns that triggered the block.
Positive Signals
5
  • Domain registered in 1994 and operated by Microsoft for 31.9 years.
  • Zero detections across 92 antivirus engines and clean browser blocklist status.
  • Valid SSL certificate issued by Microsoft Corporation.
  • Page content and interface match official Outlook security warnings exactly.
  • Business registration confirms ownership by Microsoft Corporation.
The full analysis

Page Content

The page displays Microsoft's standard Outlook security warning stating that an unsafe link was detected and blocked. The warning explicitly identifies the blocked destination as https://www.google.com.br-pt-br625707787convitespremium@detra2-1065386985015.northamerica-south1.run.app/. The interface shows Microsoft branding, copyright notice, and links to legal and privacy pages. No login forms, payment fields, or data collection elements are present.

Infrastructure

The domain resolves to IP 52.102.98.129 with an abuse score of 0/100 and no abuse reports. SSL certificate is valid and issued by Microsoft Corporation. The page loads external resources only from outlook.live.com and microsoft.com. No redirects occur and the connection is direct.

Domain History

The domain was registered on 1994-08-18 through MarkMonitor Inc. and has been active for 31.9 years. It is privacy-protected as false, meaning ownership details are publicly associated with Microsoft. Business registration records confirm the domain belongs to Microsoft Corporation as part of their Microsoft Defender for Office 365 security suite.

Web Reputation

Our antivirus network returned 0/92 engines flagging the domain. Browser blocklist feeds show clean status. One StackExchange report confirms the domain is legitimate and explains that Microsoft replaces malicious links with this warning page. No complaints or negative mentions were found across consumer review sites.

What this means for you

This is a genuine Microsoft security page protecting you from a potentially harmful destination. The warning indicates the original link in your email was flagged as risky. Do not click Continue anyway unless you have a specific reason to trust the destination.

AI Recommendation
Do not click Continue anyway. Return to Outlook and delete the original email if you did not expect it.
Next-gen fraud intelligence
Evidence-backedCross-checked

Web Research Findings

Our live research agent queries scam-report databases, consumer-review sites, news coverage, and general web search for deu01.safelinks.protection.outlook.com, then cross-checks business-registration records and look-alike domain patterns. Everything below is pulled from what it actually found.

Business registration
Active · United States
Site traces back to an actively registered business.
Clone check
Not a clone
No well-known site's layout or branding detected here.
Typosquat check
No look-alike match
The domain doesn't resemble any well-known brand's spelling.
Web mentions
1 scam report
Key findings
6 headline facts from open-web research
  • The domain 'deu01.safelinks.protection.outlook.com' is a legitimate Microsoft service used for 'Safe Links' protection.
  • Safe Links is a security feature that scans and rewrites URLs in emails and Office 365 apps to protect users from phishing and malware.
  • When a user clicks a link, Microsoft checks the destination in real-time; if the site is deemed malicious, the user is redirected to a warning page.
  • The 'deu01' prefix indicates the specific data center location (Germany) handling the security scan for that link.
  • Users may see this domain in their browser address bar when they click a link that has been processed by Microsoft's security filters.
  • It is not a scam site, but rather a security proxy that may display a warning if the underlying link it is protecting is malicious.
Scam reports (1)
Direct quotes from public scam databases, forums, and news.
  • StackExchange

    "Yes, it is a scam, but the link is trustworthy. The email originally contained another, malicious link. That link has been replaced by Microsoft to prevent you from clicking on it."

Business registration
Status: active · United States

Domain is owned and operated by Microsoft Corporation as part of their Microsoft Defender for Office 365 security suite.

Research summary
Narrative write-up from our AI analyst, grounded on the facts above

Our research found one relevant report on StackExchange confirming that deu01.safelinks.protection.outlook.com is a legitimate Microsoft service. The report explains that when an email contains a malicious link, Microsoft replaces it with this warning page to prevent users from clicking it. No scam reports, complaints, or negative mentions were found on consumer review sites or other sources. Business registration records verify the domain belongs to Microsoft Corporation as part of their security suite.

Domain Timeline

  1. Aug 18, 1994
    Domain registered

    First appeared in WHOIS records — 32 years old today.

  2. Jul 15, 2026
    Latest security review — Reviewed as safe

    This scan re-ran every check and found no active threat signals.

deu01.safelinks.protection.outlook.com has operated for years with no threat signals in this review — a long, stable track record, though it is never a guarantee on its own.

Threat Detection

Antivirus Engines

Clean pass · verified
Clean across 92 engines

We cross-check every URL against our antivirus network of 92 malware and blacklist engines. None of them flagged this URL in the last scan.

0Malicious0Suspicious60Harmless92Engines
Clean
Kaspersky
Clean
Bitdefender
Clean
Microsoft
Not queried
ESET-NOD32
Not queried
Avira
Not queried
Sophos
Clean
Fortinet
Clean
Google Safebrowsing
Not queried
Emsisoft
Clean

No engine detections. The URL passed every antivirus and blacklist engine we queried in this scan. Stay vigilant — AV coverage is only one signal among many.

Security Scans

Blacklist Check
Not flagged on major threat lists

Checked against the major public blocklists used by browsers and security tools — no hits.

Reputation Sources

How this domain rates across independent threat-intelligence and blocklist providers.

Google Safe Browsing
Not listedCheck ↗
VirusTotal
Not listedCheck ↗
AbuseIPDB
Not listedCheck ↗

Technical Details

The plumbing behind the site — who registered it, how it’s encrypted, where it’s hosted, and where it links out. A valid certificate or a calm server doesn’t mean the business is honest — scam sites pass these checks too. Use this to corroborate the verdict, not to overturn it.

Contact Verification

We fetched the page and looked for real-world contact details. Legitimate businesses almost always publish an email on their own domain, a phone number, and a postal address. Scam shops usually don't.

What We Found
Has contact info, but not on the site's domain
Emails on site's domainNone
Phone numbers625707787
Postal addressNot listed
Linked social profiles0
Signal Summary
Several contact red flags
  • No email uses the site's own domain — legitimate shops usually do.
  • No postal address visible on the page.
  • Phone number listed (625707787).

Domain & Encryption

Domain History
Age32 years old
RegistrarMarkMonitor Inc.
RegisteredAug 18, 1994
ExpiresAug 17, 2026
Owner privacyVisible
Encryption Certificate
StatusValid
ProtocolTLSv1.3
IssuerMicrosoft Corporation · Microsoft TLS G2 RSA CA OCSP 04
ExpiresNov 27, 2026 (135d)
Self-signedNo
Hosting & Technology
HostingMicrosoft Corporation
Server locationUS
Web serverMicrosoft-HTTPAPI/2.0

Server Reputation

Abuse Intelligence
Confidence score0%
Reports on file0
ISPMicrosoft Corporation
Usage typeData Center/Web Hosting/Transit

Referenced Domains

Outbound domains this page links to or loads resources from. Each links to its own security scan.

What to do

Still, stay alert

No major threat indicators — but a clean scan does not guarantee every page is safe, and phishing emails routinely spoof real domains.

  • Double-check the exact URL in your address bar

    Confirm you are actually on deu01.safelinks.protection.outlook.com and not a lookalike like d-eu01.safelinks.protection.outlook.com.com or an IDN homoglyph.

  • Use a password manager

    Password managers only auto-fill on the exact domain they were saved for — they refuse to fill lookalike domains, which is the single best phishing defence.

  • Discuss this site on the forum

    If you have first-hand experience with this site — good or bad — share it with the MalwareTips community.

    Open

Final Verdict

0
Trust / 100
Final Verdict·deu01.safelinks.protection.outlook.com
SAFE

This is Microsoft's Outlook Safe Links warning page. The domain belongs to Microsoft and has been active since 1994 with clean security scans. The page warns about a suspicious destination link that Outlook blocked.

Do not click Continue anyway. Return to Outlook and delete the original email if you did not expect it.

AV engines
92
Domain age
32 yrs
Flagged
0
Scan another URL
Security review completemalwaretips.com/url-scan

Safety FAQ

Common questions, answered directly from the scan data above — so the answers always reflect the latest verdict on this page.

  • Our automated security review found no threat indicators on deu01.safelinks.protection.outlook.com, so it appears legitimate. All 92 antivirus engines we queried report it clean, and the domain is 31.9 years old, registered on August 18, 1994 — established domains are far less likely to be scams. Even so, always double-check the exact address in your browser, because phishing emails routinely spoof real, trusted domains like this one.
  • deu01.safelinks.protection.outlook.com passed our automated checks with a trust score of 94/100. No antivirus engines or major blacklists flagged it at the time of the last scan, and its signals line up with an established, legitimate site. Treat any unexpected login prompt or payment request on it with the same caution you would anywhere.
  • Yes — and this is worth understanding. Even trustworthy domains get spoofed in phishing emails (a fake message that only looks like it's from deu01.safelinks.protection.outlook.com), and legitimate sites are occasionally compromised on specific pages. A clean verdict means the site itself checks out today; it does not mean every email or link claiming to be from deu01.safelinks.protection.outlook.com is genuine. Always reach the site by typing the address yourself rather than clicking links in unexpected messages.
  • No — all 92 antivirus and blocklist engines in our malware network currently report deu01.safelinks.protection.outlook.com as clean. That's a good sign, though antivirus coverage is only one of the many signals we weigh, and brand-new scam sites can appear clean before vendors catch up.
  • No — deu01.safelinks.protection.outlook.com is not currently on the major browser blocklist feeds that Chrome, Safari, Firefox, and Edge rely on. Note that blocklists can lag behind brand-new scam domains, so "not listed" is reassuring but not a guarantee on its own.
  • deu01.safelinks.protection.outlook.com is 31.9 years old, registered on August 18, 1994 through MarkMonitor Inc.. A multi-year registration history is one of the stronger signals against a scam, though it's never a guarantee on its own — established domains can still be misused.
  • Yes — deu01.safelinks.protection.outlook.com presents a valid TLSv1.3 certificate issued by Microsoft Corporation · Microsoft TLS G2 RSA CA OCSP 04, valid for another 135 days. Important caveat: SSL only encrypts the connection between you and the site — it does not verify who runs it. Almost all scam sites now have valid SSL too, so a padlock alone never means "safe".
  • deu01.safelinks.protection.outlook.com resolves to an IP operated by Microsoft Corporation in US (Data Center/Web Hosting/Transit). Hosting location alone doesn't make a site good or bad — but hosting that doesn't match a brand's claimed country, or that sits on networks known for abuse, is one of the many signals we weigh alongside the verdict above.
  • This report is a record of the scan run on July 15, 2026, and the verdict reflects that point in time. Scam sites change fast — they can go live, get flagged, or vanish within days — so if you believe something about deu01.safelinks.protection.outlook.com has changed, MalwareTips staff can run a fresh scan that re-checks every signal from scratch and republishes an updated verdict.
Community review

User reviews & comments(0)

Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.

Loading…
Loading comments…
This report is generated automatically by combining threat intelligence, domain signals, and an AI security analyst. It is informational, not legal advice. Always use your own judgement before sharing personal information or money online.