Live threat-intelligence feeds: Sender domains and links are now checked against four continuously-updated threat databases — URLhaus, ThreatFox, OpenPhish, and PhishTank — refreshed roughly every 15 minutes, so freshly-reported phishing sites are caught quickly.
VirusTotal reputation: Domain reputation checks from VirusTotal added to the detection pipeline in production.
Focused on Gmail & Outlook: Trimmed permissions to Gmail and Outlook ahead of Chrome Web Store submission. Yahoo, Zoho, ProtonMail, iCloud, and Fastmail remain on the roadmap.