Scan your domain

Enter your domain and we'll check it for you — DNS, connectivity, and Cloudflare/HTTP errors.

What this scan sends and keeps Only the hostname you enter is used. Neither it nor the result is saved.

Who sees the hostname

• OriginError's API, a Cloudflare Worker, which runs the scan.
• Cloudflare's public DNS resolver (1.1.1.1), to look up its records.
• The site itself: one HTTP(S) request with the user agent OriginError-Scan/1.0, and a TLS handshake from OriginError's certificate checker on Netlify.
• The domain's own nameservers, asked directly by that checker.
• ARIN's RDAP service, which gets the resolved IP address (not the hostname) to name the network operator.

What's kept

• Your IP address, in a rate-limit counter (5 scans per 5 minutes). It expires automatically after 10 minutes.
• The certificate checker counts requests under a keyed hash of your IP, never the IP itself, and deletes the count within about an hour.
• A running total of scans: one number, with no hostname or IP attached.

What a scan can't tell you

It's a point-in-time observation from our servers, not from where your visitors are. Behind Cloudflare, your origin can't be reached directly, and your firewall rules, logs and dashboard settings aren't visible from outside.