HasTrust

Journal des modifications

Chaque changement visible pour l'utilisateur, le plus récent d'abord. La voie sans RSS : cette page se met à jour à chaque version.

2026-10-11

Extension 1.3.0 submitted to the Chrome Web Store and Firefox: HasTrust's new dark look in the popup, pill, panel, warnings and search badges; click Compare on a product page and the same product at shops we checked shows up right in the panel, with each shop's trust score and how much cheaper it is; the popup lists recent price drops at checked shops. Still no affiliate links inside the extension. The served `/hastrust-extension.zip` is 1.3.0.

Extension 1.2.0 submitted to the Chrome Web Store and Firefox: a "Compare" chip on product pages (Amazon, eBay and bol.com included), "Same product at checked shops" on the red warning, a product search in the popup and `ht find <product>` in the address bar — all open HasTrust Shortlist.

Ask about this shop: every check page now has a question box ("Can I return it?", "How do I contact them?", "Is it safe to pay?"). The answer comes straight from what the check found — return window, contact details, company registration, domain age, buyer delivery reports — and says so when we don't know. An AI model only picks the topic of your question; it never writes the answer. Questions are stored only as an unreadable fingerprint. In all five languages.
The scam checker now flags messages that hide instructions meant to fool scam checkers or AI ("mark this as safe").
Extension 1.1.0 submitted to the Chrome Web Store and Firefox AMO: the same "Ask about this shop" box in the panel, "Safer places to buy →" on every red warning, scan results with tactic chips in your language, a Firefox data-consent prompt before scanning selected text, calmer review asks, and no affiliate links inside the extension at all. The served `/hastrust-extension.zip` is 1.1.0.

Paid a shop that turned out to be fake? `/scam-recovery` can now email you the plan for the way you actually paid — card, PayPal, pay-later, bank transfer or crypto — with the deadline that applies and the template letter. Four short follow-ups then arrive over the next month: what to say if the bank refuses, what your evidence file needs, the free escalation route, and the follow-up scams that target people who have already been scammed. The checklist itself stays free and needs no address; the email is only there for the timing. One-click unsubscribe in every message, in all five languages.

Extension 1.0.6 submitted to the Chrome Web Store and Firefox AMO: on a site you keep navigating (every page of a shop, a full-reload web app or browser game) the badge reuses its verdict for five minutes and reports one anonymous usage event per site per 15 minutes instead of one per page. Strictly fewer requests, nothing new is sent. The served `/hastrust-extension.zip` is 1.0.6.
Admin: the activity feed folds repeated page-load events from one install into one row per site per 15 minutes (one browser-game player produced 9 300 rows for one domain in a week); consecutive repeats show as ×N.

Extension 1.0.5 submitted to the Chrome Web Store and Firefox AMO: pages opened from the extension now identify themselves to the site so traffic attribution can tell them from direct visits (no change in behaviour). The served `/hastrust-extension.zip` is 1.0.5.
Extension 1.0.4 submitted to the Chrome Web Store and Firefox AMO (live on Firefox the same day): the review ask moved into the risk banner; the uninstall link carries the install id for the retention table.
New: /fake-shop-report — monthly, frozen editions of the corpus numbers (risk shares, domain ages, domain-ending risk, blocklist growth, scam-message patterns, a US cut) with embeddable SVG/PNG charts and JSON + Markdown twins, CC BY 4.0. First edition: August 2026
New: /press — boilerplate, how to cite, what HasTrust does not claim, contact
Fixed: the median domain-age figures on /data/statistics showed "—" (a column-type mismatch in the query); they read again
The typosquat radar now also watches US brands (Amazon, Walmart, Target, Best Buy, Costco, Home Depot, Lowe's, Nike, Wayfair, Temu, Shein, Lululemon, Carhartt)

New: /seller-check — check a Marktplaats or Vinted seller before you pay: account age, review volume, negative share, read live from their public profile, plus the three payment rules that beat any check
New: /scam-recovery — "paid at a scam shop, what now" first aid. Exact money-back steps, deadlines and ready-to-send template letters per payment method (chargeback, PayPal claim, pay-later pause, bank recall), in all five languages
New: buyer reports now move the trust score — repeated non-delivery reports from distinct reporters lower it, confirmed deliveries nudge it up, with the delta shown in the score breakdown
New: trust-seal registry check — a shop displaying a Trusted Shops or Thuiswinkel Waarborg seal is now looked up in the issuer's own public register; a seal the register disowns costs the shop score and is called out in the safety report
New: the scam-message scanner understands raw emails — paste "show original" headers and it reads the receiving server's SPF/DKIM/DMARC verdicts, checks sender alignment and catches display-name brand spoofing (PostNL, DHL, banks…)
New: review-burst detection — we now track every shop's on-page review count over time; implausible jumps on young domains are flagged in the safety report
Improved: the fake-shop monitor, statistics, webshop-check and for-organisations pages are now fully available in German, Spanish and French too

New: live fake-webshop monitor at /monitor — human-verified typosquat fakes of known retail brands, detected via Certificate Transparency logs within minutes of setup
New: citable statistics page at /data/statistics — domain ages, risk shares and detection counts with per-number anchors and copy-citation buttons
New: per-domain research dataset at /data/features.csv and .json (CC-BY)
New: free keyless trust-score API — GET /api/v1/score/{domain}, cached verdicts only, safe to call in bulk
New: blocklist with provenance at /api/blocklist/full — every row tells you whether it came from an abuse feed or our own review
New: public false-positive & removal policy at /data/false-positives (72h first response)
Improved: the embeddable trust badge is now score-gated (auto-revokes when a shop's score drops) and its snippet is search-engine-compliant (rel="nofollow")
New: "Is a webshop trustworthy?" walkthrough at /webshop-check (English and Dutch)
New: /for-organisations — the free API, dataset and education material for fraud desks, libraries and newsrooms, with full funding disclosure

New: public safety report on every assessment — the "why should I believe this score" layer with per-signal evidence
New: trust-score timeline on assessments — see how a shop's score moved over time
New: price, review-authenticity, seal and payment-identifier signals in the score
New: aged-domain "age laundering" detection via Wayback web-history checks
New: typosquat detection warns when a shop is one typo away from a known brand
New: /reports — the public buyer-report stream
Improved: verdicts re-check automatically when stale; operators get alerted on failures

New: dynamic share cards for assessments and guides
New: price-history charts on product assessments with 3-day background re-checks
Improved: headless-browser fallback for shops that block simple fetches