Crypto Mailto Defender

Tired of spam bots scraping your email addresses? Standard obfuscation techniques (like ROT13 or Base64) are easily bypassed by modern crawlers. Crypto Mailto Defender uses real cryptography to protect your links. It intercepts your HTML server-side, encrypts your mailto: links using an automatically generated AES-256-CBC key, and replaces the email with a masked version (e.g., ********@domain.com). When a real human user clicks the link or the icon, the plugin executes a secure, nonce-protected Server-Side AJAX request to instantly decrypt the payload and seamlessly open their mail client. The encryption key never leaves your server.

• Zero-Impact Performance: JavaScript and CSS are only loaded on pages that actually contain email links.
• Forminator Compatible: Intercepts forms loaded via AJAX dynamically.
• Smart UI: Text links are revealed on the first click, while icons/buttons instantly open the mail client.

Acknowledgements The idea and the study behind this plugin were inspired by the article Email Obfuscation by Spencer Mortensen.

1.0.0

• Initial release.