Reveal URLs

Spot phishing links before you click.

Phishing relies on a simple trick: a link's visible text says one thing (paypal․com) while its real destination points somewhere else (paypal․account-verify․example), or hides behind a tracker or redirector that says nothing about where you will end up. Reveal URLs shows you the URL each link in your mail points to and flags the ones where the visible text names a URL or host that does not match it. It does not follow redirects, so it shows the tracker or redirector URL, not where it lands. - See each link's URL inline above the link, and on hover in its tooltip. - Mismatched links are highlighted in a colour you choose (red by default); non-mismatching links are shown in your "non-mismatch" colour (an amber tone by default). - Works out of the box on Gmail, Outlook, Proton and other major email providers in your browser. - Optionally works on additional webmail hosts you add yourself: open the options page, enter the host and the message-body selector, and grant the permission when your browser asks; nothing runs on a host until you opt in. - No accounts, no tracking, no servers: everything happens locally in your browser. The extension only *reveals* and *flags* links; it never changes, blocks or rewrites where a link points. Reveal URLs reads your settings from your browser's own sync/local storage and acts only on the built-in webmail pages listed below plus any host you add and grant yourself. Also see: Email link phishing: your app should always show the URL: https://www.phpfreelance.co.uk/blog/email-link-phishing-your-app-should-always-show-the-url