About this tool
What does it decode?
Wrapped redirect URLs (Outlook SafeLinks, Google redirect wrappers, proofpoint-style links) back to the real destination — for inspection before clicking, faster than unwrapping by hand.
How to use it
- Paste the wrapped link as received.
- Read the extracted destination URL.
- Decide trust before visiting.
Examples
- Previewing a “safelinks.protection.outlook.com/?url=…” target.
- Unwrapping tracking redirects in newsletters.
- Cleaning links before archiving citations.
Important limitations
- Unwrapping ≠ vetting: the destination can still be malicious — that is the point of checking.
- Some wrappers are single-use or signed; copies may not resolve twice.
- Shorteners stack: unwrap repeatedly until the final host shows.
Privacy
Decoded locally without fetching anything — safer than clicking through, since no request fires.
Frequently asked questions
Why do wrappers exist?
Enterprise scanning and click-time verdicts — protection with a privacy cost.
Can I re-wrap?
No need — share the clean destination directly.
Still suspicious after unwrap?
Check the domain age, TLS and content separately.