What's new in 2.9.9:

• Wallet drainer signature interceptor: detects Permit2, setApprovalForAll, and eth_sign abuse before you sign anything in your
  wallet.
• Free-hosting phishing detection: catches scam pages hosted on sites.google.com, vercel.app, netlify.app and similar services that
  impersonate brands.
• Real-time language switching: change language from the popup or on-page shield and every surface (popup, shield panel, danger
  overlay, warning banners) updates instantly. Supported: English, Arabic, Spanish, Chinese.
• Clearer messaging: AI scan limit and network errors now show friendly wording instead of technical jargon.
• Private/internal networks (RFC1918, .local, .corp) show a soft "internal site - not scanned" notice instead of an error.
• Premium activation auto-rescans the current tab so protection kicks in immediately.
• Better handling of brief server hiccups so transient 502/503 responses no longer affect license status.
• Whitelisted legitimate research and security tools that were occasionally flagged (PhishTank, Oxylabs, VyprVPN).
• Updated extension name to better reflect what SafeBrowz does for everyday users.

v2.9.8.3 — Security hardening patch

This is a small follow-up to 2.9.8.2 with additional defensive measures:

• Extra escaping on translated text in upgrade banners (defense in depth against any future translation
supply-chain issue)
• Background script no longer dumps full message objects to console (license keys redacted from logs)
• Internal API tightening to prevent abuse of our threat-scanning service

No new permissions. No new data categories. Same user-facing features as 2.9.8.2.

What's new in 2.9.8.2

1 free AI deep scan per day
Free users now get one full AI scam scan every 24 hours. Hit a suspicious site, get a verdict, no signup
required.

Redesigned danger warning page
When SafeBrowz blocks a confirmed scam, you see a clear threat report with the impersonated brand, domain
age, identified threats, and a one-click Go Back button.

Real-time language switching
Switch between English, Arabic (RTL), Spanish, or Chinese (Simplified) from the extension settings. The
on-page shield, warning overlay, and popup all update instantly. No page reload needed.

Real-time premium activation
Enter your license key in the popup and every open tab updates immediately. No need to refresh each tab.

Privacy unchanged
SafeBrowz still processes URLs in real time and discards them. No browsing history stored, no personal data
collected. The freemium quota uses an anonymous random token, never your IP or identity.

Bug fixes
The upgrade button and license activate button now respect every language switch correctly. The full-page
warning is reserved for confirmed scams only (caution-level sites still show the on-page shield turning
yellow but no longer block the page).

SafeBrowz 2.9.8

What's new
- Spanish and Simplified Chinese UI translations added. Switch between English, Arabic, Spanish, and
Chinese in Settings, Language.
- Firefox for Android support. The extension now lists in the Firefox Android add-on store.
- Right-to-left layout fixes for Arabic.

Bug fixes
- Free-hosting platform apex domains (vercel.app, notion.so, netlify.app, medium.com, etc.) no longer show
a yellow caution banner on the company homepage. Subdomains on these platforms still receive the full
3-layer scan including brand impersonation, drainer JS detection, and AI content analysis.
- The Upgrade to Premium button now opens the website in your selected language.
- The on-page shield indicator's language picker now lists all four supported languages.

Detection updates
- Detection database expanded with additional brands and patterns.

v2.9.7.1 — Firefox for Android support

Adds compatibility with Firefox for Android (Firefox 128+). No new features or behavior changes. Same scam detection, same UI, now available on mobile.

v2.9.7 — Bug fix

• Fixed a false positive where SafeBrowz incorrectly flagged Mozilla's
own AMO outgoing link redirect (the prod.outgoing.prod.webservices.mozgcp.net
link wrapper used on every addons.mozilla.org listing page) as
suspicious. Mozilla-owned infrastructure domains (mozilla.org,
mozilla.net, mozgcp.net, mozaws.net, firefox.com, thunderbird.net)
are now whitelisted in our hardcoded safe-domains list.

No new permissions, no new APIs, no new data collection — this is a
small targeted bug fix on top of v2.9.6.