Warnings now work inside frames. Many sign-in forms are served in an iframe, and until now typing, pasting or copying inside one raised no warning at all. The same fix covers pages built from custom elements.

A site whose warnings you turned off keeps its verdict on the toolbar, drawn in grey instead of red. A red icon over a page that will warn about nothing promises a guard that was stood down. Tamper alerts still come through in red.

A paste into a sign-in field is held on an unfamiliar site even when the page hides that field inside a component. It used to slip through.

If the check itself fails, Visilant says so instead of showing the site as safe.

Every address in a link and every recipient of a mailto link is checked, not only the first one.

Two sites on the same hosting platform are treated as two different sites, so visits to one are not counted for the other.

The buttons that change how an address is drawn - upper or lower case, highlighting, and the punycode spelling - are now in the header, so they can be reached on the check page. The account name of an email address has its own case button beside it, and is left exactly as typed unless you change it.

Dialogs can be answered from the keyboard, and their close buttons are named for screen readers.

Visilant 3.0.0

The biggest release so far. Knowing a site is no longer a single number, email addresses are checked like any other, and it now runs on Firefox for Android.

Before you update
- Visilant now asks to read your browsing history, so Firefox will hold the update until you accept. It is read once, on your device, and never leaves it. Only a visit count, a first and last date and a number of active days are kept per site. No page addresses, no titles, no search terms.
- Nothing you already know turns unfamiliar. Your existing threshold carries over, and the two new checks stay off for a profile coming from an older version, whose records hold no dates to read.
- Your counts are left alone. The automatic import runs only if no visits are recorded at all, so nothing is rewritten behind your back.
- English only. Other translations were dropped rather than kept half checked.

What is new
- Familiarity is three checks, not one: visits, the number of separate days you have been there, and how long the site has been known. Each has its own number and switch, and you choose whether a site must pass all of them, any one, or two of three.
- Every warning shows its reasoning. Tooltips, dialogs, the in-page panel and the dashboard list the facts a verdict was drawn from, and only the checks you switched on.
- Email addresses are checked like any other address, plus what is particular to mail: services anyone can sign up to are marked as such, throwaway mailboxes are named, and Gmail is counted at mail.google.com instead of a zero that could never move.
- Addresses built to deceive are called out on their structure: a familiar name in front of an @ (paypal.com@evil.net), one buried in the middle (paypal.com.evil.net), a bare number, deep nesting, one word in two alphabets.
- Look-alike detection uses your own history. An address one character away from a site you visit is called out, whether a foreign letter, a 1 standing in for an l, a typo, or a padded name (paypal-secure.com). Because it compares against your history and not a shipped list, nobody can test a fake in advance.
- Check anything by hand: a link, a domain, an email address or a QR code image, pasted, dropped in or picked from disk, or from the right-click menu.
- Hold pastes on sites you do not know, off by default.
- Browser history import, with real first-visit dates and active days. It can be cancelled and resumed, and lives in Your data, where you can also erase every visit.
- Firefox for Android. The popup is usable with a fingertip and dialogs stay on screen.
- The settings page was rebuilt around its sections, with a table of contents and a reset in every card.

Fixes: erasing your visits no longer takes your own lists with it, and the language on screen is the one reported in settings.

Every release can now be rebuilt from source byte for byte. Full notes: https://github.com/ikskoder/visilant/releases/tag/v3.0.0

A small stabilization release on top of 1.9.1. All major features shipped in 1.9.x; this bump rolls up bug fixes found during testing.

Fixes:
- Per-tab badge no longer gets overwritten when a link is opened in a background tab — the current tab keeps its own count.
- Link tooltip animation now slides in the correct direction, and the gap between link and tooltip no longer blocks clicks.
- Popup icons render correctly in Firefox production builds.

Fixed settings icon in popup

Release Notes

1.9.0 — 2026-04-19

A major release (release candidate) that shifts Visilant from reactive-only (warning you after you've landed on an unfamiliar site) to proactive (warning you before you even click). Also adds anti-tampering protection, URL unshortening, theming, and a comprehensive test suite.

Added

• Link Safety — Proactive Link Analysis
• Link tooltip on hover, left-click, or right-click with destination domain, visit count, and familiarity indicator (familiar / unfamiliar / never visited).
• URL mismatch detection with side-by-side comparison table when a link's visible text differs from its actual destination.
• Punycode / Unicode detection for homograph-attack domains.
• Navigation Intercept (opt-in) — full-screen confirmation dialog before visiting unfamiliar sites, with destination domain, visit history, mismatch/punycode warnings, and resolved real destination.
• Context menu integration — right-click any link to run a safety check in a new tab.
• Scope control — enable Link Safety everywhere, on a whitelist, or on a blacklist of domains.
• Shortened URL Detection (unshortener)
• Resolves links behind bit.ly, t.co, and similar shorteners to reveal the real destination.
• Three modes: off, on-demand (button in tooltip), or automatic.
• Optionally show the full resolved URL, the redirect chain trace, or resolve arbitrary URLs (not just known shorteners).
• Maintain your own list of shortener domains (marking any domain as a shortener on the fly).
• Configure remote shortener lists to keep the built-in list up to date.
• Anti-Tampering Protection
• MutationObserver detects when a page forcibly removes the extension's UI from the DOM and triggers a critical system notification.
• Randomized container ID per page load to make detection by malicious scripts harder.
• Per-site toggle from the popup and domain exclusion list in settings for trusted sites that legitimately rebuild the page.
• Hardened Security
• Early content-script injection at document_start to beat page scripts.
• Event capturing for keyboard and clipboard events to resist blocking by malicious scripts.
• Overlay protection for in-page warnings (max z-index, fixed positioning).
• Theming & Responsive UI
• Light / Dark / System theme.
• Responsive layout — popup and settings adapt to narrow widths (popup-in-tab, mobile-form-factor windows).
• Popup enhancements
• Per-site anti-tampering status and toggle.
• Adjustable popup font size.

Changed

• Rewrote user-facing locale strings for clarity: removed unnecessary jargon, fixed typos and grammar, softened alarm wording in the tampering notification, aligned terminology across locales, and added technical terms in parentheses for users who want to look them up.
• Polish

Fixed language settings

🛡️ Enhanced Protection Against Fake Sites
We've added new visual tools to help you instantly spot phishing attempts:
- Domain Highlighting: Visilant now highlights the actual domain name, making it easier to spot tricks like google.com.security-check.xyz.
- Homograph Protection: Improved display for international domains to prevent attacks where special characters look like Latin letters (e.g., a fake amazon.com).

📊 New Interactive Dashboard
Click the extension icon to access the new popup menu:
- View detailed visit statistics for the current site.
- Sort your site history by name or visit count.
- Adjust font size and display settings on the fly.

🔒 Hardened Security
- Anti-Tampering: If a malicious website tries to disable or hide the extension, Visilant will detect it and send you an immediate system alert.
- Early Protection: The extension now activates immediately when a page starts loading, preventing malicious scripts from interfering.

Minor fixes and improvements
Release v1.0.0

Warning is showed not only for entering content on sites with a few visits but for copying content too (different type of warning)
Improved translations
Renewed icons
Code injection on page is now conditional (less fingerprinting, better performance)
Warning styles are more consistent accross the different sites