PRODUCT UPDATES
What’s new
Each release is organized into Performance, Security and Design. Older release notes describe how the product worked at the time. Later releases may change that behavior.
Current release: v4.9.273. Latest release: .
v4.9.70 · Connected structured data
Performance
- Live Backup MX pricing, organization identity, articles, tools and breadcrumbs.
Security
No changes were recorded in this category.
Design
- One connected JSON-LD graph per public page.
- Private pages and diagnostic results remain outside structured data.
v4.9.69 · SMTP results and website analytics
Performance
- Google Analytics added to public website pages; account, payment and administration screens are excluded.
Security
No changes were recorded in this category.
Design
- SMTP test history identifies the tested port, including failed checks.
v4.9.68 · Customer communications
Performance
- Concise payment confirmations, corporate emails and payment documents.
Security
No changes were recorded in this category.
Design
- Technical details and support conversations are available in the portal.
- Earlier receipts use their original purchase details with the updated document layout.
v4.9.67 · Compact payment feedback
Performance
- Payment status, error code, meaning and recommended action appear together in one theme-matched notice.
- Payment status details keep transaction facts without repeating the same bank refusal.
Security
No changes were recorded in this category.
Design
- Removed repeated explanations and the redundant checkout verification badge.
v4.9.66 · 3D Secure credit card wording
Performance
- Payment titles and buttons explicitly describe 3D Secure credit card payment.
- Quoted payment amounts retain the same wording after card lookup and currency conversion.
- Statement disclosure, error explanations and payment processing remain unchanged.
Security
No changes were recorded in this category.
Design
No changes were recorded in this category.
v4.9.65 · Payment error explanations
Performance
- Payment and order screens display the numeric error code, its English meaning and the recommended next action.
- Site payment labels, receipts and service emails use neutral provider wording; the actual card statement descriptor remains disclosed at checkout.
Security
- Fixed display labels are independent of payment decision rules. Only bounded numeric codes from stored provider diagnostics are shown. Raw provider messages and card details are excluded. Error labels do not authorize retries, activate service or confirm collection.
Design
- Unknown codes retain their numeric reference without an invented explanation.
- Timeout explanations never unlock an uncertain charge. Existing live configuration and accepted amounts are preserved.
v4.9.64 · Card declines and payment results
Performance
- Result pages provide a direct return to payment or verified payment and service details, with a five-second continuation.
- Collected payments are displayed separately from setup delays. Unknown outcomes, bank timeouts and fraud review continue to block another charge.
Security
- Documented bank refusals, including insufficient funds, expiry and security-code errors, reopen checkout with a clear English explanation.
- Existing pending attempts are checked against their original payment ID. Stored error codes alone never authorize retries.
- ErrorResponse can use status=failure without signed payment fields, including HTTP 400 validation responses. Only explicitly classified refusals from the original HTTPS API request can close an attempt. Returned identities and amounts are checked when present. Successful or reviewed payments cannot be overwritten by an unsigned error. Authorization intent, receipt checks, live configuration, accepted prices and conversion snapshots are preserved.
Design
No changes were recorded in this category.
v4.9.63 · 3DS outcomes and recovery
Performance
- Initialization timeouts are reconciled using the original payment reference, including attempts without a known payment ID.
- Fraud approval after review (2) is accepted only through verified direct payment inquiry. Explicit basket item approval is checked before granting service.
Security
- Bank verification, payment confirmation and fraud review have separate order labels and safe diagnostic details.
- Verified failures after authorization are resolved by inquiry; uncertain authorizations never generate another charging call.
- Untrusted callbacks cannot overwrite payment diagnostics; locally deleted authorizations remain visible in billing diagnostics for merchant review.
- Direct 3DS uses the v2 completion endpoint with the original amount, currency and basket ID. Signed status inquiries verify payment ID, conversation, basket and amounts. Safe metadata includes verification result, last callback/check timestamps and bounded numeric provider errors. Local verification cancellation does not cancel or refund a charged payment.
Design
No changes were recorded in this category.
v4.9.62 · Documented 3DS failure callbacks
Performance
- Successful callbacks still require the original paymentId. Unknown signatures remain blocked.
- Bank return screens distinguish closed attempts, verified payments, setup pending and uncertain results.
Security
- Signed unsuccessful bank callbacks can close pre-authorization verification when paymentId is empty or omitted.
Design
No changes were recorded in this category.
v4.9.61 · Interrupted payment recovery
Performance
No changes were recorded in this category.
Security
- Pending orders include a payment status check and safe cancellation of unfinished bank verification.
- Expired 3DS callback states close only when authorization has not started; uncertain authorizations remain protected against duplicate payment.
Design
- Cancellation checks the signed provider result and blocks late callbacks from charging a cancelled attempt.
v4.9.60 · Application review and consistency fixes
Performance
- Queued message metadata survives the supported queue lifetime within 30-day history retention.
- Exchange-rate cache validity is checked across midnight; invalid order cursors return validation errors.
Security
- Both Close buttons in dialogs work; support formatting and gateway status colors respect the security policy.
Design
- Failed public pages and tool results are not indexed; guide sitemap dates and article dates are aligned.
- Regression tests updated for local DNS and panel-only SMTP status.
v4.9.59 · Local DNS startup readiness
Performance
No changes were recorded in this category.
Security
- Startup failures include DNS service diagnostics captured before rollback.
- Local-only DNS and previous-configuration rollback are preserved.
Design
- Server settings wait up to 15 seconds for a successful local resolver answer after restart.
v4.9.58 · Backup MX content and search structure
Performance
- Clear Cloud Backup MX, secondary MX and backup mail exchanger descriptions.
- Filtering scope and queue limitations remain explicit; no payment or mail-routing changes.
Security
No changes were recorded in this category.
Design
- New cloud deployment and gateway protection guides with contextual internal links.
- Updated search titles, descriptions, article metadata and sitemap.
v4.9.57 · Per-status check timestamps
Performance
No changes were recorded in this category.
Security
- TXT ownership, Backup MX, SMTP destination and mail acceptance show their last check time in Istanbul (UTC+3).
- DNS and acceptance timestamps use the matching security evaluation; SMTP uses its own destination probe.
- Missing checks show Not checked yet. Older matching observations are marked stale; another destination or ownership proof is never shown as current.
Design
No changes were recorded in this category.
v4.9.56 · SMTP, TLS and domain workspace
Performance
- Certificate failures report hostname/IP mismatch, expiry, self-signed or trust-chain errors. Failed verification is never bypassed; no unverified retry is made.
Security
- SMTP reachability (TCP connection and 220 greeting) is independent of TLS certificate validation.
- Verified TLS shows protocol, cipher, issuer, validity, names and SHA-256 fingerprint when available.
- For implicit TLS on port 465, a failed handshake prevents reading the SMTP greeting, so reachability remains unconfirmed.
- Administrator domain forms use separate identity, delivery, service/security and deletion groups with responsive widths.
- Public SMTP checks connect to a validated, pinned IP using the system trust store, the tested hostname and a bounded overall deadline. Only banner, EHLO, STARTTLS and QUIT are used; no authentication or message submission occurs. Certificate errors retain their verification code and reason. Diagnostic output is escaped, manual test budgets remain shared across application workers, and the admin forms retain their existing CSRF and permission checks.
Design
- MX targets remain above full-width SMTP results; the tested server has a highlighted header.
- A gateway certificate may differ from the back-end server certificate. Failed handshakes can prevent certificate details from being read.
- SMTP observations remain panel-only with 30-day history; no SMTP alert email is generated.
v4.9.55 · Panel-only SMTP history
Performance
- SMTP outage and recovery email notices are disabled.
Security
No changes were recorded in this category.
Design
- Pending legacy SMTP notices are cancelled during upgrade.
- SMTP history remains in the customer panel for thirty days.
- Removed SMTP email confirmation and cooldown controls.
v4.9.54 · Domain diagnostics and confirmed alerts
Performance
- Direct administrator domain, queue and history actions.
Security
No changes were recorded in this category.
Design
- Inline SMTP observations beside MX records in Domain Check.
- Separate configurable public and administrator test limits.
- Independent health timeouts, confirmation counts and outage notice cooldown.
v4.9.53 · Own DNS and administrator diagnostics
Performance
- Administrator DNS and SMTP tests with measured timings and thirty-day database history.
Security
No changes were recorded in this category.
Design
- Local recursive DNS for application and mail services with no public resolver fallback.
- Administrator-managed DNS slots and DNS / SMTP timeouts.
v4.9.51 · DNS and SMTP tools
Performance
No changes were recorded in this category.
Security
- Public TXT, SPF, NS, SOA, address and reverse DNS observations.
- Bounded public SMTP connection, banner and TLS checks without sending email.
Design
- Compact administrator domain details with responsive delivery controls.
v4.9.50 · Maintenance, ownership and delivery help
Performance
No changes were recorded in this category.
Security
No changes were recorded in this category.
Design
- Three new technical guides and thirteen articles in total.
- Public FAQ reads current plan values.
- Contextual setup and support links with preserved SEO policies.