{"id":3104,"date":"2026-05-14T07:00:47","date_gmt":"2026-05-14T07:00:47","guid":{"rendered":"https:\/\/blog.ibvl.in\/index.php\/2026\/05\/14\/simple-bypass-of-the-link-preview-function-in-outlook-junk-folder-thu-may-14th\/"},"modified":"2026-05-14T07:00:47","modified_gmt":"2026-05-14T07:00:47","slug":"simple-bypass-of-the-link-preview-function-in-outlook-junk-folder-thu-may-14th","status":"publish","type":"post","link":"https:\/\/blog.ibvl.in\/index.php\/2026\/05\/14\/simple-bypass-of-the-link-preview-function-in-outlook-junk-folder-thu-may-14th\/","title":{"rendered":"Simple bypass of the link preview function in Outlook Junk folder, (Thu, May 14th)"},"content":{"rendered":"
\n

Besides serving as a place where Microsoft Outlook places suspected spam, the Outlook Junk folder has one additional function that can be quite helpful when it comes to identifying malicious messages. Any e-mail placed in this folder is stripped of all formatting, and destinations of all links included in the message become visible to the user, as you can see in the following images which show the same e-mail when it is placed in the inbox, and when it is placed in the Junk folder.<\/p>\n

\"\"<\/a><\/p>\n

\"\"<\/a><\/p>\n

Having access to this functionality is quite advantageous, since it helps easily and safely inspect where a link included in an e-mail might lead. Moving suspicious messages to the Junk folder and viewing them there is correspondingly one of the tips I often give during security awareness training sessions\u2026<\/p>\n

Although I will continue to do so, I will now have to add a caveat based on an experience with a phishing message I found in my Junk folder in April.<\/p>\n

Before I opened the message in question, I was under the impression that the link preview mechanism works without issues with arbitrary HREF included in an e-mail, and that it always shows the corresponding URL. Which is why I was surprised when the Outlook preview pane showed me no links for the following message, even though the \u201cVIEW APRIL SALARY INCREASE\u201d text is obviously supposed to represent a link to some URL.<\/p>\n

\"\"<\/a><\/p>\n

Once I moved the message to another folder, it turned out my assumption was correct, as the text really was associated with a link, as you can see\u2026<\/p>\n

\"\"<\/a><\/p>\n

So, how did this link manage to \u201cbypass\u201d the Junk folder preview mechanism?<\/p>\n

At first, I thought that the behavior might be caused by the relevant A tag containing another embedded tag \u201cinside it\u201d, which can lead to quite unexpected results in Outlook, such as it modifying where an HREF points to without any input from the user.[1<\/a>]<\/p>\n

Nevertheless, after looking at the HTML code \u2013 which seems reasonably normal, as you may see \u2013 and a little testing, it became obvious that the truth was much more straightforward.<\/p>\n

\"\"<\/a><\/p>\n

The cause for the link not being displayed by Outlook when the message was placed in the Junk folder was the fact the HREF target didn\u2019t contain a valid URI \u2013 the scheme (protocol) part was missing, with only the path segment present. The link preview mechanism therefore didn\u2019t parse it as a valid link and didn\u2019t show it.<\/p>\n

On one hand, this is understandable, since the HREF really didn\u2019t contain a valid URL\/URI as per the RFC3986[2<\/a>], however, since the link is clickable (and works) when the message is open normally, I would consider this behavior of the link preview mechanism to be somewhat unfortunate\u2026<\/p>\n

In any case, it is certainly good to know about it, especially if \u2013 like me \u2013 you commonly recommend that non-specialists use the link preview mechanism that Outlook Junk folder provides to look at suspicious messages. As it turns out, it is not as dependable a mechanism as I had believed it to be.<\/p>\n

[1] https:\/\/isc.sans.edu\/diary\/Broken+phishing+accidentally+exploiting+Outlook+zeroday\/26254<\/a>
\n[2] https:\/\/www.rfc-editor.org\/rfc\/rfc3986.html<\/a><\/p>\n

———–
\nJan Kopriva
\nLinkedIn<\/a>
\nNettles Consulting<\/a><\/p>\n

(c) SANS Internet Storm Center. https:\/\/isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.<\/p><\/div>\n","protected":false},"excerpt":{"rendered":"

Besides serving as a place where Microsoft Outlook places suspected spam, the Outlook Junk folder has one additional function that can be quite helpful when it comes to identifying malicious messages. Any e-mail placed in this folder is stripped of all formatting, and destinations of all links included in the message become visible to the […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"site-container-style":"default","site-container-layout":"default","site-sidebar-layout":"default","disable-article-header":"default","disable-site-header":"default","disable-site-footer":"default","disable-content-area-spacing":"default","footnotes":""},"categories":[90],"tags":[91],"class_list":["post-3104","post","type-post","status-publish","format-standard","hentry","category-cybersecurity","tag-cybersecurity"],"yoast_head":"\nSimple bypass of the link preview function in Outlook Junk folder, (Thu, May 14th) - Imperative Business Ventures Limited<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/blog.ibvl.in\/index.php\/2026\/05\/14\/simple-bypass-of-the-link-preview-function-in-outlook-junk-folder-thu-may-14th\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Simple bypass of the link preview function in Outlook Junk folder, (Thu, May 14th) - Imperative Business Ventures Limited\" \/>\n<meta property=\"og:description\" content=\"Besides serving as a place where Microsoft Outlook places suspected spam, the Outlook Junk folder has one additional function that can be quite helpful when it comes to identifying malicious messages. Any e-mail placed in this folder is stripped of all formatting, and destinations of all links included in the message become visible to the […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/blog.ibvl.in\/index.php\/2026\/05\/14\/simple-bypass-of-the-link-preview-function-in-outlook-junk-folder-thu-may-14th\/\" \/>\n<meta property=\"og:site_name\" content=\"Imperative Business Ventures Limited\" \/>\n<meta property=\"article:published_time\" content=\"2026-05-14T07:00:47+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/isc.sans.edu\/diaryimages\/images\/26-05-14-normal.png\" \/>\n<meta name=\"author\" content=\"admin\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"admin\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/blog.ibvl.in\/index.php\/2026\/05\/14\/simple-bypass-of-the-link-preview-function-in-outlook-junk-folder-thu-may-14th\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/blog.ibvl.in\/index.php\/2026\/05\/14\/simple-bypass-of-the-link-preview-function-in-outlook-junk-folder-thu-may-14th\/\"},\"author\":{\"name\":\"admin\",\"@id\":\"https:\/\/blog.ibvl.in\/#\/schema\/person\/55b87b72a56b1bbe9295fe5ef7a20b02\"},\"headline\":\"Simple bypass of the link preview function in Outlook Junk folder, (Thu, May 14th)\",\"datePublished\":\"2026-05-14T07:00:47+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/blog.ibvl.in\/index.php\/2026\/05\/14\/simple-bypass-of-the-link-preview-function-in-outlook-junk-folder-thu-may-14th\/\"},\"wordCount\":568,\"image\":{\"@id\":\"https:\/\/blog.ibvl.in\/index.php\/2026\/05\/14\/simple-bypass-of-the-link-preview-function-in-outlook-junk-folder-thu-may-14th\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/isc.sans.edu\/diaryimages\/images\/26-05-14-normal.png\",\"keywords\":[\"Cybersecurity\"],\"articleSection\":[\"Cybersecurity\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/blog.ibvl.in\/index.php\/2026\/05\/14\/simple-bypass-of-the-link-preview-function-in-outlook-junk-folder-thu-may-14th\/\",\"url\":\"https:\/\/blog.ibvl.in\/index.php\/2026\/05\/14\/simple-bypass-of-the-link-preview-function-in-outlook-junk-folder-thu-may-14th\/\",\"name\":\"Simple bypass of the link preview function in Outlook Junk folder, (Thu, May 14th) - Imperative Business Ventures Limited\",\"isPartOf\":{\"@id\":\"https:\/\/blog.ibvl.in\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/blog.ibvl.in\/index.php\/2026\/05\/14\/simple-bypass-of-the-link-preview-function-in-outlook-junk-folder-thu-may-14th\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/blog.ibvl.in\/index.php\/2026\/05\/14\/simple-bypass-of-the-link-preview-function-in-outlook-junk-folder-thu-may-14th\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/isc.sans.edu\/diaryimages\/images\/26-05-14-normal.png\",\"datePublished\":\"2026-05-14T07:00:47+00:00\",\"author\":{\"@id\":\"https:\/\/blog.ibvl.in\/#\/schema\/person\/55b87b72a56b1bbe9295fe5ef7a20b02\"},\"breadcrumb\":{\"@id\":\"https:\/\/blog.ibvl.in\/index.php\/2026\/05\/14\/simple-bypass-of-the-link-preview-function-in-outlook-junk-folder-thu-may-14th\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/blog.ibvl.in\/index.php\/2026\/05\/14\/simple-bypass-of-the-link-preview-function-in-outlook-junk-folder-thu-may-14th\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/blog.ibvl.in\/index.php\/2026\/05\/14\/simple-bypass-of-the-link-preview-function-in-outlook-junk-folder-thu-may-14th\/#primaryimage\",\"url\":\"https:\/\/isc.sans.edu\/diaryimages\/images\/26-05-14-normal.png\",\"contentUrl\":\"https:\/\/isc.sans.edu\/diaryimages\/images\/26-05-14-normal.png\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/blog.ibvl.in\/index.php\/2026\/05\/14\/simple-bypass-of-the-link-preview-function-in-outlook-junk-folder-thu-may-14th\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/blog.ibvl.in\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Simple bypass of the link preview function in Outlook Junk folder, (Thu, May 14th)\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/blog.ibvl.in\/#website\",\"url\":\"https:\/\/blog.ibvl.in\/\",\"name\":\"Imperative Business Ventures Limited\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/blog.ibvl.in\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/blog.ibvl.in\/#\/schema\/person\/55b87b72a56b1bbe9295fe5ef7a20b02\",\"name\":\"admin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/blog.ibvl.in\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/4d20b2cd313e4417a599678e950e6fb7d4dfa178a72f2b769335a08aaa615aa9?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/4d20b2cd313e4417a599678e950e6fb7d4dfa178a72f2b769335a08aaa615aa9?s=96&d=mm&r=g\",\"caption\":\"admin\"},\"sameAs\":[\"https:\/\/blog.ibvl.in\"],\"url\":\"https:\/\/blog.ibvl.in\/index.php\/author\/admin_hcbs9yw6\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Simple bypass of the link preview function in Outlook Junk folder, (Thu, May 14th) - Imperative Business Ventures Limited","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/blog.ibvl.in\/index.php\/2026\/05\/14\/simple-bypass-of-the-link-preview-function-in-outlook-junk-folder-thu-may-14th\/","og_locale":"en_US","og_type":"article","og_title":"Simple bypass of the link preview function in Outlook Junk folder, (Thu, May 14th) - Imperative Business Ventures Limited","og_description":"Besides serving as a place where Microsoft Outlook places suspected spam, the Outlook Junk folder has one additional function that can be quite helpful when it comes to identifying malicious messages. Any e-mail placed in this folder is stripped of all formatting, and destinations of all links included in the message become visible to the […]","og_url":"https:\/\/blog.ibvl.in\/index.php\/2026\/05\/14\/simple-bypass-of-the-link-preview-function-in-outlook-junk-folder-thu-may-14th\/","og_site_name":"Imperative Business Ventures Limited","article_published_time":"2026-05-14T07:00:47+00:00","og_image":[{"url":"https:\/\/isc.sans.edu\/diaryimages\/images\/26-05-14-normal.png","type":"","width":"","height":""}],"author":"admin","twitter_card":"summary_large_image","twitter_misc":{"Written by":"admin","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/blog.ibvl.in\/index.php\/2026\/05\/14\/simple-bypass-of-the-link-preview-function-in-outlook-junk-folder-thu-may-14th\/#article","isPartOf":{"@id":"https:\/\/blog.ibvl.in\/index.php\/2026\/05\/14\/simple-bypass-of-the-link-preview-function-in-outlook-junk-folder-thu-may-14th\/"},"author":{"name":"admin","@id":"https:\/\/blog.ibvl.in\/#\/schema\/person\/55b87b72a56b1bbe9295fe5ef7a20b02"},"headline":"Simple bypass of the link preview function in Outlook Junk folder, (Thu, May 14th)","datePublished":"2026-05-14T07:00:47+00:00","mainEntityOfPage":{"@id":"https:\/\/blog.ibvl.in\/index.php\/2026\/05\/14\/simple-bypass-of-the-link-preview-function-in-outlook-junk-folder-thu-may-14th\/"},"wordCount":568,"image":{"@id":"https:\/\/blog.ibvl.in\/index.php\/2026\/05\/14\/simple-bypass-of-the-link-preview-function-in-outlook-junk-folder-thu-may-14th\/#primaryimage"},"thumbnailUrl":"https:\/\/isc.sans.edu\/diaryimages\/images\/26-05-14-normal.png","keywords":["Cybersecurity"],"articleSection":["Cybersecurity"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/blog.ibvl.in\/index.php\/2026\/05\/14\/simple-bypass-of-the-link-preview-function-in-outlook-junk-folder-thu-may-14th\/","url":"https:\/\/blog.ibvl.in\/index.php\/2026\/05\/14\/simple-bypass-of-the-link-preview-function-in-outlook-junk-folder-thu-may-14th\/","name":"Simple bypass of the link preview function in Outlook Junk folder, (Thu, May 14th) - Imperative Business Ventures Limited","isPartOf":{"@id":"https:\/\/blog.ibvl.in\/#website"},"primaryImageOfPage":{"@id":"https:\/\/blog.ibvl.in\/index.php\/2026\/05\/14\/simple-bypass-of-the-link-preview-function-in-outlook-junk-folder-thu-may-14th\/#primaryimage"},"image":{"@id":"https:\/\/blog.ibvl.in\/index.php\/2026\/05\/14\/simple-bypass-of-the-link-preview-function-in-outlook-junk-folder-thu-may-14th\/#primaryimage"},"thumbnailUrl":"https:\/\/isc.sans.edu\/diaryimages\/images\/26-05-14-normal.png","datePublished":"2026-05-14T07:00:47+00:00","author":{"@id":"https:\/\/blog.ibvl.in\/#\/schema\/person\/55b87b72a56b1bbe9295fe5ef7a20b02"},"breadcrumb":{"@id":"https:\/\/blog.ibvl.in\/index.php\/2026\/05\/14\/simple-bypass-of-the-link-preview-function-in-outlook-junk-folder-thu-may-14th\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/blog.ibvl.in\/index.php\/2026\/05\/14\/simple-bypass-of-the-link-preview-function-in-outlook-junk-folder-thu-may-14th\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/blog.ibvl.in\/index.php\/2026\/05\/14\/simple-bypass-of-the-link-preview-function-in-outlook-junk-folder-thu-may-14th\/#primaryimage","url":"https:\/\/isc.sans.edu\/diaryimages\/images\/26-05-14-normal.png","contentUrl":"https:\/\/isc.sans.edu\/diaryimages\/images\/26-05-14-normal.png"},{"@type":"BreadcrumbList","@id":"https:\/\/blog.ibvl.in\/index.php\/2026\/05\/14\/simple-bypass-of-the-link-preview-function-in-outlook-junk-folder-thu-may-14th\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/blog.ibvl.in\/"},{"@type":"ListItem","position":2,"name":"Simple bypass of the link preview function in Outlook Junk folder, (Thu, May 14th)"}]},{"@type":"WebSite","@id":"https:\/\/blog.ibvl.in\/#website","url":"https:\/\/blog.ibvl.in\/","name":"Imperative Business Ventures Limited","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/blog.ibvl.in\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/blog.ibvl.in\/#\/schema\/person\/55b87b72a56b1bbe9295fe5ef7a20b02","name":"admin","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/blog.ibvl.in\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/4d20b2cd313e4417a599678e950e6fb7d4dfa178a72f2b769335a08aaa615aa9?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/4d20b2cd313e4417a599678e950e6fb7d4dfa178a72f2b769335a08aaa615aa9?s=96&d=mm&r=g","caption":"admin"},"sameAs":["https:\/\/blog.ibvl.in"],"url":"https:\/\/blog.ibvl.in\/index.php\/author\/admin_hcbs9yw6\/"}]}},"_links":{"self":[{"href":"https:\/\/blog.ibvl.in\/index.php\/wp-json\/wp\/v2\/posts\/3104","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.ibvl.in\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.ibvl.in\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.ibvl.in\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.ibvl.in\/index.php\/wp-json\/wp\/v2\/comments?post=3104"}],"version-history":[{"count":0,"href":"https:\/\/blog.ibvl.in\/index.php\/wp-json\/wp\/v2\/posts\/3104\/revisions"}],"wp:attachment":[{"href":"https:\/\/blog.ibvl.in\/index.php\/wp-json\/wp\/v2\/media?parent=3104"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.ibvl.in\/index.php\/wp-json\/wp\/v2\/categories?post=3104"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.ibvl.in\/index.php\/wp-json\/wp\/v2\/tags?post=3104"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}