Dynamic detection config: Admin API allows real-time addition of phishing domains, brand lists, and TLDs — no redeployment needed.
Local-part brand impersonation detection: Now catches Microsoft@fakeDomain.com-style attacks where brand name appears in the email username.
Instant CRITICAL blocklist: Confirmed phishing domains can be blocked across all scans in seconds via operator API.
Typosquat detection expanded: Catches 1-character variations of helpdesk, servicedesk, and common IT support domain patterns.
7-provider support: Outlook (cloud.microsoft), Yahoo, Zoho, ProtonMail, iCloud, and Fastmail added alongside Gmail.
VirusTotal verdict messaging improved: Now distinguishes engine-flagged domains from negative reputation score domains.
Trusted domains list: Users can whitelist known-safe senders in extension settings.
Faster scan times: Detection pipeline optimised through parallel execution — all four layers run concurrently.
Redesigned verdict sidebar with color-coded risk levels and expanded red flag breakdown.