v3.2.0

Visilant 3.2.0 treats www.example.com and example.com as one site, rewrites every warning in plain words, and makes the look-alike warnings name the site they are about instead of describing it.

www.example.com and example.com are one site

Visits were counted per exact hostname, so a bank you read every day at www. looked unfamiliar the first time a link dropped the prefix. A warning that is wrong that often teaches people to click through it.

Records are now keyed by the name without a leading www., as long as what is left is still somebody's site, so www.com and www.co.uk stay as they are. Counting, the badge, verdicts, silencing, the history import, the popup and the check panel all use the same key. A link from www.example.com to example.com no longer gets the tooltip or stops behind the click dialog as if it led somewhere new.

Records from earlier versions are merged once, when the extension starts, before any other visit is written. Visits add up, the first and last dates take the widest span, and active days take the larger count. A site silenced under either name stays silenced. An interrupted merge does not count anything twice.

Every warning says what is true where it appears

The link dialog said "Unfamiliar site ahead" whatever the link was. Its title now follows the destination: an unfamiliar site, a short link not unfolded yet, or a familiar site with a plain "Go to link". A short link that could not be unfolded says what went wrong. With "resolve any link" on, a link that stays on a familiar host opens without a dialog.

Every text was rewritten for readers with B1 English and no technical background. The copy warning names the real risk, a swapped clipboard and the Win+R trick. The tampering notification no longer suggests switching protection off.

Also: notifications name the site, a QR code that cannot be read is no longer shown as a security warning, an email address is never called "never visited", the bare "Total" is gone from the check panel, and "Mark as shortener" appears only after a check.

Look-alike warnings name the site they imitate

The reason used to sit on a line of its own and say "that name", which told a first-time reader nothing about which name was meant. Every reason is now one sentence: it names the familiar site in a filled block and says with "but" how the address differs from it. The visit count after it is gone, because a number at the end of a sentence about another address read as that address's visits.

An address with a whole domain placed in front of the real one used to read "Domain ending used as a subdomain: com", as though com were the subdomain. It now reads "Looks like yourbank.com, but the real site is pay-verify.top". A customer of a hosting platform is named as that customer, never as the bare platform. When the domain in front is one you know, the look-alike line already explains the trick, so this marker steps aside. The real site is drawn in red and the familiar name in grey.

A look-alike written in xn-- form is now explained as a swapped letter. The domain was compared in its encoded form against labels decoded to Unicode, so the two never matched and the site's own name was taken for a subdomain.

Silences on sites that are familiar by now

A silence on a familiar site holds nothing back until the familiarity rules are made stricter, and then it quietly keeps that site from warning. The settings page names those sites and removes them with one button. A new setting, off by default, removes a site from the list on your next visit once it is familiar, and clears the familiar ones straight away when switched on. A silence put on a site that is already familiar is left alone.

The right-click link check reads the link text

"Check link safety" from the context menu now compares the link text with where the link goes. The text is taken at the moment of the right-click, so the page cannot rewrite it first. It answers for links within the same site and for mailto: links too, where it used to do nothing.

Fixed

• The popup's domain card marks a domain that is a link shortener, and says that the visit history says nothing about where its links go.
• The base domain card keeps its gap when the checked host is the only one on record, and says that nothing else is recorded under the domain.
• The warning and anti-tampering switches no longer draw blue on blue in the dark theme.
• The import texts no longer promise that imported sites are familiar before the second pass has filled in their dates.
• The check field no longer spell-checks addresses. A red wave under a domain read as the field marking the wrong part of it.
• The subdomain depth is drawn as a plain number rather than through the address highlighter, which painted its digits blue as though the count were a suspect character.

Under the hood

• adm-zip is held at 0.6.1 (GHSA-7q85-xj36-vmfc) and image-size at 2.0.4 (GHSA-5p2g-fcmc-qvqq, GHSA-w3rx-r6r6-pgpr). Both arrive only through web-ext and addons-linter, development tools that never ship in the extension.
• A commit message longer than 1000 characters is rejected by a hook.
• The Android end-to-end suite follows the current popup and texts again, and passes on a real phone.

Verify this build

Both archives rebuild byte for byte from this tag:

nix build github:ikskoder/visilant/v3.2.0#firefox
sha256sum result/*.xpi   # compare with SHA256SUMS on this release

scripts/verify.sh <downloaded.xpi> compares the copy your browser installed against a fresh build, file by file. Full instructions are in REPRODUCE.md. Release archives also carry a Sigstore-signed provenance attestation tying them to this commit and the workflow that built them.

Full Changelog: v3.1.3...v3.2.0