BlankTrail Proxy Changelog — Release History

1.1.42Native DNS (VDNS): geo-consistent resolving & bypass provider DNS filters

Each proxy port can now resolve target domains itself, through the tunnel, using DNS servers consistent with the exit IP's location (via EDNS Client Subnet). This keeps your DNS geography aligned with your proxy — a common anti-fraud trust-score factor — and lets you open "sensitive" domains that some proxy providers block at the DNS level. Enable it per port: "On DNS leak" turns it on automatically only when a leak is detected, or "Forced" keeps it always on (for example, to bypass a provider's domain filter). Off by default; pick the automatic curated resolvers or supply your own.

1.1.41Closer fingerprint match in profile-pool mode

In database (profile-pool) mode, choosing a browser version that isn't in the built-in profile set now generates a realistic fingerprint for that exact version — matching the version you configured, or the one in the request's User-Agent — instead of falling back to an unrelated profile. When a generated fingerprint can't be produced, the closest real profile of the same browser is used, never a different browser.

1.1.40Easier API key & one-click OpenVPN

Your API key is now always visible in Settings, with a copy button — no more one-time-only display. You can also set your own custom key instead of only generating a random one, which makes it easier to reuse an existing key across your scripts and integrations.
On Windows, when OpenVPN isn't installed the setup wizard now offers to download it from the official site and install it for you — instead of just pointing you to a link. It stays optional and is only needed for the OpenVPN gateway.

1.1.39Manage from another device

The optional "Allow LAN" setting now also exposes the dashboard and control API to your local network, not just the proxy ports — so you can open and manage the app from another device. Access stays behind your dashboard password and API key, and password recovery remains available only from this computer. Enable it in Settings and restart the app for the dashboard to become reachable on the LAN.

1.1.38Reliable startup after update

Fixed a failure where the app could not start after an update on Windows because it lost access to its own data folder (you would see an "Access is denied" error while creating the certificate file). Startup and automatic updates are now reliable, and an install already affected by this is repaired automatically on the next start.

1.1.37Clearer proxy tests & Windows polish

The upstream connection test now reports the real exit IP that sites will see and shows the full chain path. When you route through a proxy chain (a proxy inside another proxy), the result clearly shows both hops and the final exit address, instead of naming only the first hop and looking like the second one was ignored.
When you open a port for editing, the upstream and first-hop proxy fields now keep the scheme you typed (such as socks5://) instead of showing only the address.
On Windows, starting a VLESS/Reality gateway no longer opens a stray command-line window.

1.1.36Security & privacy hardening

Proxy ports and the dashboard now listen on this computer only (127.0.0.1) by default. Making them reachable from your local network is an explicit opt-in in Settings, so a fresh install is never unexpectedly exposed to other devices.
Added optional password protection for your proxy ports: you can require a username and password (SOCKS5 or HTTP) before a port accepts connections. It is off by default and enabled in Settings.
Sensitive local files — including the license and the dashboard session key — are now encrypted at rest on Windows and readable only by your account, so other users on the same machine cannot access them.

1.1.35Reliable automatic updates

Fixed automatic in-app updates so new versions download and install correctly. From this version onward installations update on their own; if you are on an older version, install this update once manually and automatic updates will work from then on.
Added a safety check that refuses to apply an update file that isn't a valid program, so a failed update can never leave the app unable to start.

1.1.34Cache privacy

BlankTrail still shares one fast response cache across all your ports, but activity on one port can no longer be correlated to another through it: a cached page can't be revalidated in a way that carries a tracking cookie or stored identifier over to a different port (even when your outbound IP changes), and personalized responses that vary by cookie or by who is logged in are never served to a different port. Rotating a port's identity now also clears that port's saved TLS session state, so a fresh identity never resumes an old connection.
The Microsoft Edge profile is updated to Edge 150, the current Edge release. Ports emulating Edge now match the latest real Edge across TLS, HTTP/2 and headers.
Fixed a rare Windows startup failure where the tray app could refuse to launch when it couldn't create its data folder or open its log file, sometimes requiring a full reboot to recover. It now locates its data reliably alongside the application (with a fallback) and starts even if the log file can't be opened.

1.1.33Stability fixes

Multiple OpenVPN gateways can now be used at the same time — different ports can route through different OpenVPN configurations concurrently.
The Microsoft Edge profile now presents a genuine Edge identity (User-Agent and client hints) instead of appearing as Chrome.
Ports set to spoof the User-Agent and headers now always apply the chosen browser identity, even without full HTTP/2 spoofing.

1.1.32Fingerprint fidelity

Non-browser clients on HTTP/2-spoofing ports now present a byte-exact browser fingerprint across TLS, HTTP/2 and headers, passing stricter fingerprinting checks.
Added a byte-exact Firefox 152 profile.
HTTP/3 (QUIC) requests now carry the browser's connection settings, and TLS session resumption is supported — closer to real browser behavior.
Response caching now works together with HTTP/2 fingerprint spoofing.

1.1.31Fingerprint refinements

You can now open Android device profiles from the dashboard (previously only Windows/macOS/Linux/iOS were selectable, even though Android profiles ship in the database).
HTTP/2 header order is now spoofed to match the selected browser by default, so a port's HTTP/2 request looks like the real browser without any extra toggle.
Editing a port's browser/OS now shows the resulting profile immediately in the details panel instead of appearing blank until the first request.

1.1.30Port pool reliability

Upstream-proxy checks and traffic no longer fail on proxies that self-sign or intercept TLS — many residential/mobile proxies do this, and they now pass the reachability, leak and config checks.
When an upstream proxy fails, the pool now switches to a different proxy on retry (fast failover) instead of repeatedly dialing the dead one, matching the default rotate-on-error policy.
The pool's config test now checks a random live port instead of always the first one, so it reflects the pool as a whole.

1.1.29Port Pool fixes

Pool ports now open as SOCKS5 by default (you can pick SOCKS5 or HTTP in the Port Pool dialog) so UDP and spoofed HTTP/3 work through the pool. Existing pools keep their original protocol.
Editing a running pool now correctly restores its proxy-source address and its rotation settings instead of coming back blank.
A proxy-list URL pasted into the file/server-path field now downloads correctly instead of failing, and the Advanced settings panel renders properly.

1.1.28Crash-report banner fix

The "previous run exited uncleanly" bug-report banner now stays dismissed. Closing it — or sending a report — no longer brings it back after you refresh the dashboard; it only reappears if the app actually crashes again.

1.1.27Port Pool & profile view

The Port Pool dialog now closes on launch, and each running pool's controls (edit, config test, view profile, stop, export link) live on its row in the Active Ports table. The exported proxy list now carries the scheme (socks5://host:port). You can also download-and-count a proxy source and test a random proxy for reachability, DNS/IPv6 leaks and UDP before launching.
The browser-versions panel is now a clean, collapsible list grouped by operating system and browser, and the stat shows how many browser versions the database holds.

1.1.26Update reliability

Automatic updates now retry when a download is interrupted on a slow or unstable connection, and detect an incomplete transfer directly, instead of failing on the first attempt.

1.1.25Auto-profile display

For ports using auto-profile from User-Agent, the dashboard now shows the identity actually served for the last request (for example Chrome after a Chrome request), instead of the initial seed profile.

1.1.24Port view & config-test fixes

Fixes text being clipped at the right edge of the port details and the Profile view (long fingerprint values now wrap), the copy button overlapping the neighbouring field, and the configuration test: it no longer reports a false fingerprint mismatch on Browser/auto ports and its result stays on screen.

1.1.23Windows update fix

Resolves a Windows self-update failure ("Access is denied") where the running application could not be replaced in place; updates now install reliably. Minor Profile-view layout refinement so long cipher and extension lists wrap cleanly.

1.1.22Port editing & config-test fix

Open ports can now be reconfigured in place through a full Edit dialog, matching the Open Port dialog. The configuration test no longer reports a false fingerprint mismatch on SOCKS5 ports, and its result stays visible instead of clearing. Port details are shown in a cleaner read-only layout.

1.1.21Open Port dialog refinements

Quick-start captions above the Browser and HTTP-client presets, consistent option naming in the mode dialog, a steadier pre-flight test layout, stricter upstream validation, and a selectable proxy-string field in the port details.

1.1.20Interface fixes

Dashboard interface corrections: tab layout for longer labels, Open Port dialog sizing, tooltip positioning, and consistent language switching across all elements.

1.1.19Dashboard in Russian & Chinese

The in-app dashboard is now fully localized — switch between English, Russian, and Chinese from the header. Every screen, dialog, tooltip, and message is translated.

1.1.18Rebranded to BlankTrail Proxy

SpoofForge is now BlankTrail Proxy, served at blanktrail.com. Existing installs keep working and update seamlessly — no action needed.

1.1.17Smarter Open Port presets

The Open Port quick-start presets now set a fully coherent identity: the HTTP-client preset assigns and spoofs a complete browser identity, and the Browser preset matches and normalizes the real browser's fingerprint — each with a clear Identity / Uniqueness choice.

1.1.16Refreshed logo

A single BlankTrail Proxy shield logo now appears consistently across the app, the tray and installer icons, and the website.

1.1.15Scraper task improvements

The Scraper Tasks dialog is clearer: upload a proxy list directly or point to a URL, pick any browser or a random mix (and a random OS), with sensible defaults and an Advanced section for finer pool control.

1.1.14Dashboard overview improvements

The main dashboard is cleaner and faster to work with: an adjustable page size for large port lists, one-click copy of a port's proxy address, and a clearer browser-types summary.

1.1.13Domain routing improvements

Domain routing rules now save automatically on every change, with a cleaner editor: guided upstream/gateway selectors and per-field help.

1.1.12Presets management

Redesigned the Presets tab: organize saved port sets in folders with drag-and-drop, save all or selected ports, and apply with overwrite or merge.

1.1.11VPN gateways management

Redesigned the VPN gateways tab: a clear table with inline edit and delete, and a guided add dialog for VLESS and OpenVPN.
Gateway chaining (route one gateway through another) now works, with loop protection.

1.1.10Interface improvements

Redesigned the port-opening dialog: one-click browser / HTTP-client presets and a cleaner, guided layout.
Test an upstream proxy or gateway (connectivity, UDP, and leak checks) right before opening a port.

1.1.9Reliability & dashboard refresh

Improved reliability of profile and generator delivery.
Redesigned dashboard: feature tabs, a settings menu, and a language selector.
Clearer connection-status messages.

1.1.8Gateways out of the box

VLESS+Reality gateways now work out of the box — nothing extra to download.
If OpenVPN isn't installed, the dashboard now shows how to install it for your operating system.

1.1.7Password recovery & installer options

Forgot your dashboard password? You can now reset it by re-activating your license.
On Windows, when an existing installation is detected, the installer lets you choose to update, reinstall from scratch, or remove — and a clean reinstall can keep your license and certificate.

1.1.6In-app updates

Update BlankTrail Proxy to a new version right from the dashboard — one click, with a manual download fallback if an automatic update isn't possible.
Further HTTP/3 (QUIC) fingerprint accuracy refinements to match current Chrome even more closely.

1.1.5Sharper HTTP/2 fingerprinting

When the app picks a browser profile from the requested User-Agent, the HTTP/2 layer of the fingerprint now matches that real browser even more closely.

1.1.4Latest browser fingerprints

Updated to Chrome 150, along with the current Firefox, Safari, and Edge.
Profiles are more diverse and realistic, so each connection looks like a distinct real machine rather than a copy of the same one.
HTTP/3 (QUIC) fingerprinting is fully up to date.

1.1.3License upgrades & money-back

Upgrade your license to a higher plan in place, paying only the price difference.
A 48-hour money-back guarantee is now available.

1.1.0Stronger licensing & integrity

Hardened license protection: the fingerprint engine is now delivered securely to your licensed device at startup instead of shipping inside the app.
The app connects to your account once at launch to load its profiles; a brief internet connection is required when it starts.
No change to how you open ports or use profiles — everything works the same once running.

1.0.5Fingerprint tools

Config test: one click when opening a port or a scraper pool checks for IP/DNS leaks, confirms the fingerprint spoof actually reaches the target, and reports whether the upstream proxy supports UDP.
View profile: inspect the exact identity a port presents — User-Agent, TLS composition, and the expected JA3.
Import fingerprint: capture a real browser's fingerprint and apply it to a port, or save it under a name and reuse it later by name.

1.0.4Flexible routing

Domain Routing rules: a dedicated tab to send chosen domains or exact hosts through a different proxy, gateway, or chain — each rule with its own spoofing settings, or none.
Profiles counter now breaks down by OS, browser, and browser version.

1.0.3Smarter caching

Two new hard-cache modes: 'media only' and 'auto-warm'.
The product version is now shown in the dashboard.

1.0.2Productivity features

Idle-timeout control: set it globally by clicking, or a custom timeout / 'never' per port.
Profile sources: curated database, on-the-fly generation, or random.
Header spoofing: rewrite outdated request headers to match the current browser (recommended for scrapers).
Port presets: named sets of ports with their settings and folders, preserved across updates.
Scraper batch mode: a pool of proxy ports over a range fed by a rotating upstream list, with automatic fingerprint & proxy rotation, self-healing, and one-click export of the open ports as a proxy list.

1.0.1Onboarding & installers

Simplified first-run setup (guided onboarding, choose your own password).
A single Windows app with a system-tray icon and product logo — no console window.
Localized installer (EN/RU/ZH) with one-click root-certificate install.
In-place updates: detects an existing version and updates it without resetting your license or settings.
Cleaner logs.

1.0.0Initial release

First public release of BlankTrail Proxy.

1.1.1 – 1.1.2Reliability & resilience

The app handles brief internet interruptions more gracefully and starts up more reliably.