Firefox Browser Add-ons
  • Extensions
  • Themes
    • for Firefox
    • Dictionaries & Language Packs
    • Other Browser Sites
    • Add-ons for Android
Log in
Preview of Visilant

Visilant by Xcoder

Protection against phishing sites based on your personal site visiting statistics.

5 (1 review)5 (1 review)
2 Users2 Users
Download Firefox and get the extension
Download file

Extension Metadata

Screenshots
Instantly check visit history for the current site and its sibling domains using popup. In this example, notice how Visilant exposes the fake rnicrosoft[.]com (mimicking Microsoft) — the uppercase display setting clearly reveals the 'RN' vs 'M' deception.Spot the real domain instantly. In this example, the attacker tries to hide behind google.com, but Visilant highlights the true destination (totaly-legit.com) so you don't fall for the trick.Example of the in-page warning when trying to type text on a site with a number of visits that is lower than threshold to be considered safe. It is the most useful in dealing with phishing cloned site when you now you visited original site a lot.Example of the in-page warning when site is trying to trick you into pasting commands into terminal (that were copied into buffer by the malicious site). If you sure you didn't copied anything and see this warning, chances are that this site is malicious.Settings pageSettings page (continued)
About this extension
Visilant is a lightweight, open-source extension designed to protect you from phishing sites and homograph attacks. It helps you spot fake websites that try to steal your credentials by visually mimicking legitimate services.

How it works:
Most phishing websites are those you have never visited or visit very rarely. Visilant tracks your visit history locally and provides immediate visual cues when you interact with an "unfamiliar" site. Unlike traditional antivirus solutions, it can alert you about phishing sites the moment they are created, without waiting for blacklist updates.

Key Features:
* Homograph Protection: Visilant highlights the actual domain name and supports Punycode display to prevent attacks where special characters look like Latin letters (e.g., a fake amazon.com).
* Interactive Dashboard: Click the icon to view detailed visit statistics, sort your site history, and adjust display settings on the fly.
* Hardened Security: Includes anti-tampering protection that detects and alerts you if a malicious website attempts to disable or hide the extension.

GETTING STARTED
1. Install the extension.
2. (Highly Recommended) Pin the Visilant icon to your browser toolbar for constant visibility.
3. Click the Visilant icon to open the Dashboard (Popup).
4. Click the Settings (gear) icon to configure preferences.
5. Import your browser history to initialize the visit counter. This drastically reduces false positives for sites you already use.

CONFIGURATION INCLUDES:
1. Safety Threshold: How many visits make a site "familiar" (default is 10).
2. Display & Sorting:
* Toggle Domain Highlighting to easily spot the real domain extension.
* Switch between Unicode and Punycode for international domains.
* Sort site history by name or visit count.
3. Notifications:
* Triggers: Typing, copying, or both.
* Style: Browser notifications, in-page warnings, or both.

PRIVACY & PERMISSIONS
Visilant is open-source and operates locally:
1. All data remains on your computer. Nothing is sent to external servers.
2. Permissions:
* Tabs, Storage, Host Permissions: Required for core functionality (tracking visits, detecting inputs).
* Notifications: Required to alert you if a malicious site attempts to tamper with the extension.
* Browser History: Optional. Required only if you choose to import history (recommended).

LIMITATIONS
1. Not a Malware Blocker: Visilant focuses on social engineering and spoofing. It does not block malware downloads or trackers.
2. Relies on Awareness: The extension warns you, but you must decide to act on that warning.
3. False Positives and Negatives: Legitimate sites with low visit counts may trigger warnings (false positives), while phishing sites visited repeatedly (or hijacked sites) may go unflagged (false negatives).
4. Script Injection: Visilant injects a script to detect inputs. While the extension includes Anti-Tampering Protection to detect if a site tries to remove this script, pinning the extension icon remains the most reliable visual indicator.
Rated 5 by 1 reviewer
Log in to rate this extension
There are no ratings yet

Star rating saved

5
1
4
0
3
0
2
0
1
0
Read 1 review
Permissions and data

Required permissions:

  • Display notifications to you
  • Access browser tabs
  • Access your data for all websites

Optional permissions:

  • Access browsing history
  • Access your data for all websites

Data collection:

  • The developer says this extension doesn't require data collection.
Learn more
More information
Add-on Links
  • Support site
  • Support Email
Version
1.1.1
Size
243.67 KB
Last updated
7 days ago (Dec 6, 2025)
Related Categories
  • Privacy & Security
License
MIT License
Privacy Policy
Read the privacy policy for this add-on
Version History
  • See all versions
Tags
  • anti malware
  • security
Add to collection
Report this add-on
Go to Mozilla's homepage

Add-ons

  • About
  • Firefox Add-ons Blog
  • Extension Workshop
  • Developer Hub
  • Developer Policies
  • Community Blog
  • Forum
  • Report a bug
  • Review Guide

Browsers

  • Desktop
  • Mobile
  • Enterprise

Products

  • Browsers
  • VPN
  • Relay
  • Monitor
  • Pocket
  • Bluesky (@firefox.com)
  • Instagram (Firefox)
  • YouTube (firefoxchannel)
  • Privacy
  • Cookies
  • Legal

Except where otherwise noted, content on this site is licensed under the Creative Commons Attribution Share-Alike License v3.0 or any later version.