[dao-]

> It used to do that, but doesn't anymore.

I work for Mozilla (on Firefox) and I was around when phishing protection was introduced. Pretty sure it never did that. Not leaking the user's visit has always been a top priority for us.

> Although it seems they're still doing that for files:

What exactly do you mean by "that"? What you quoted below for certain executable downloaded files never applied to phishing protection, I don't think.