Latest updates and improvements to FourA
Every Auto response now carries a meta object (which rung won, whether a challenge was solved, attempt count, total credits) plus the working session (proxy, cookies, userAgent) so you can see what cracked the target and replay it yourself. The session.proxy field is the opaque base36 proxy ID, never a raw address. Set returnSession: false if you don't want the session in the response.
Auto now handles non-interactive Cloudflare challenges (the "Checking your browser" wall some protected sites serve) end-to-end, instead of returning the challenge page as if it were content. Two related cases also got fixed: a transport 200 hiding a challenge interstitial now escalates to a real solve, and a challenge that re-serves the wall after dropping a clearance cookie now reloads and pulls the real content. Marathonbet is the headline site that newly passes; vinted and a few other interstitial-on-200 targets also benefit.
Refreshing the Playground no longer flashes the static state before yours reappears. A new Reset button (behind a confirm) clears all three request tabs, cookies, and carried proxies in one go. A response can now also carry its proxy ID or User-Agent into the next request when you ask for it, instead of auto-applying behind your back.
Each Single response now includes the proxy ID that handled the request, and Browser responses do the same. Useful for chained calls that need to stick to the same proxy.
Click a column header in the Dashboard to sort it. Works on Activity, API Keys, and sessions, survives the auto-refresh, and Ctrl-click (Cmd on Mac) clears the choice. The sidebar also collapses to an icon rail when you want the table to breathe.
Activity used to show raw outcome strings like Application_fail while Overview used friendly labels (App Fail) with proper colors. Activity now uses the same labels and colors, so the two views read the same.
Authenticated calls now come back with an X-Foura-Request-Id header. Stash it in your own logs and you can match any request to its row in Activity, or hand it to support so we can look up exactly what happened on our side.
Hit the new Cancel button while a playground request is loading and we abort it cleanly. The panel snaps back to idle with a 'Request canceled' note instead of a scary network error.
The recheck queue now drains in days instead of weeks. We cut the time to pick each proxy to test from about 2 seconds to about 10 ms, so the pool stays fresher under load. Fewer dead IPs in rotation, and every Single and Proxy Finder call works against a healthier set.
Every refresh batch now spreads across distinct subnets, so each run uses the full concurrency budget. The Proxy Finder pool turns over 5 to 10 times faster and stale entries clear within hours.
Below 768px the URL row reflows into two rows, response tabs scroll horizontally, and the cookie table becomes a card grid. Hint tooltips open on tap instead of hover; iPhone SE (below 374px) gets extra shrink. The Send button is centered properly and a long URL no longer pushes the page into horizontal scroll.
Expand used to stretch the response card inside the page flow, so tall panes added body scroll and shifted the layout. It's now a fixed overlay between the sidebar and viewport edge, with panes that grow to fill the viewport. Escape closes it; one helper handles click and key paths.
Targets that resolve to a private network range now return a 400 with a clear validation error instead of being forwarded. The check runs before any request goes out and covers reserved IPv4 and IPv6 blocks. If you accidentally pass an internal hostname, you'll see a clean error right away. Same behavior across Single, Proxy Finder, and Browser.
Request and response columns now share matching tabs (UI, Body, Headers, Cookies, Raw). Each pane has its own view switcher (JSON tree, HTML tree, text), Expand stretches the response full-width, and Ctrl/Cmd+K opens find-in-pane with next/prev navigation. Copy and Download buttons sit per-pane and grab exactly what's on screen, and the Cookies tab now groups by host with filter, per-row delete, and flag badges.
We rolled out unique Open Graph cards for all 30 existing blog posts. Links shared on Discord, LinkedIn, Slack, or Twitter now show a clean, branded preview instead of a generic favicon. New posts get their card generated automatically, with text-fitting that wraps long titles instead of cutting them mid-word.
