Changelog

Every user-visible change, newest first. Follow the RSS-less way: this page updates with every release.

2026-09-06

Extension 1.0.5 submitted to the Chrome Web Store and Firefox AMO: pages opened from the extension now identify themselves to the site so traffic attribution can tell them from direct visits (no change in behaviour). The served `/hastrust-extension.zip` is 1.0.5.
Extension 1.0.4 submitted to the Chrome Web Store and Firefox AMO (live on Firefox the same day): the review ask moved into the risk banner; the uninstall link carries the install id for the retention table.
New: /fake-shop-report — monthly, frozen editions of the corpus numbers (risk shares, domain ages, domain-ending risk, blocklist growth, scam-message patterns, a US cut) with embeddable SVG/PNG charts and JSON + Markdown twins, CC BY 4.0. First edition: August 2026
New: /press — boilerplate, how to cite, what HasTrust does not claim, contact
Fixed: the median domain-age figures on /data/statistics showed "—" (a column-type mismatch in the query); they read again
The typosquat radar now also watches US brands (Amazon, Walmart, Target, Best Buy, Costco, Home Depot, Lowe's, Nike, Wayfair, Temu, Shein, Lululemon, Carhartt)

New: /seller-check — check a Marktplaats or Vinted seller before you pay: account age, review volume, negative share, read live from their public profile, plus the three payment rules that beat any check
New: /scam-recovery — "paid at a scam shop, what now" first aid. Exact money-back steps, deadlines and ready-to-send template letters per payment method (chargeback, PayPal claim, pay-later pause, bank recall), in all five languages
New: buyer reports now move the trust score — repeated non-delivery reports from distinct reporters lower it, confirmed deliveries nudge it up, with the delta shown in the score breakdown
New: trust-seal registry check — a shop displaying a Trusted Shops or Thuiswinkel Waarborg seal is now looked up in the issuer's own public register; a seal the register disowns costs the shop score and is called out in the safety report
New: the scam-message scanner understands raw emails — paste "show original" headers and it reads the receiving server's SPF/DKIM/DMARC verdicts, checks sender alignment and catches display-name brand spoofing (PostNL, DHL, banks…)
New: review-burst detection — we now track every shop's on-page review count over time; implausible jumps on young domains are flagged in the safety report
Improved: the fake-shop monitor, statistics, webshop-check and for-organisations pages are now fully available in German, Spanish and French too

New: live fake-webshop monitor at /monitor — human-verified typosquat fakes of known retail brands, detected via Certificate Transparency logs within minutes of setup
New: citable statistics page at /data/statistics — domain ages, risk shares and detection counts with per-number anchors and copy-citation buttons
New: per-domain research dataset at /data/features.csv and .json (CC-BY)
New: free keyless trust-score API — GET /api/v1/score/{domain}, cached verdicts only, safe to call in bulk
New: blocklist with provenance at /api/blocklist/full — every row tells you whether it came from an abuse feed or our own review
New: public false-positive & removal policy at /data/false-positives (72h first response)
Improved: the embeddable trust badge is now score-gated (auto-revokes when a shop's score drops) and its snippet is search-engine-compliant (rel="nofollow")
New: "Is a webshop trustworthy?" walkthrough at /webshop-check (English and Dutch)
New: /for-organisations — the free API, dataset and education material for fraud desks, libraries and newsrooms, with full funding disclosure

New: public safety report on every assessment — the "why should I believe this score" layer with per-signal evidence
New: trust-score timeline on assessments — see how a shop's score moved over time
New: price, review-authenticity, seal and payment-identifier signals in the score
New: aged-domain "age laundering" detection via Wayback web-history checks
New: typosquat detection warns when a shop is one typo away from a known brand
New: /reports — the public buyer-report stream
Improved: verdicts re-check automatically when stale; operators get alerted on failures

New: dynamic share cards for assessments and guides
New: price-history charts on product assessments with 3-day background re-checks
Improved: headless-browser fallback for shops that block simple fetches