Reveal URLs

About

Phishing relies on a simple trick: a link's visible text says one thing (paypal․com) while its real destination points somewhere else (paypal․account-verify․example).

Reveal URLs shows you the real destination of links in your webmail and flags the ones where the visible text disagrees with where the link actually points.

- See each link's true destination inline, above the link, or in its tooltip.
- Mismatched links are highlighted in a colour you choose (red by default); honest links are shown in your "match" colour (green by default).
- Works on Gmail, Outlook and Proton Mail in the browser out of the box, and on every message in Thunderbird regardless of provider.
- Optionally works on additional webmail hosts you add yourself: open the options page, enter the host and the message-body selector, and grant the permission when your browser asks — nothing runs on a host until you opt in.
- No accounts, no tracking, no servers: everything happens locally in your browser. The extension only reveals and flags links — it never changes, blocks or rewrites where a link points.

Reveal URLs reads your settings from your browser's own sync/local storage and acts only on the built-in webmail pages listed below plus any host you add and grant yourself.

Also see: Email link phishing: your app should always show the URL:
https://www.phpfreelance.co.uk/blog/email-link-phishing-your-app-should-always-show-the-url