Troubleshoot Cloudflare and origin issues with evidence, not guesswork. Enter a domain to scan it, or paste an error code. Each result shows what was observed, what it most likely means, and how to confirm it yourself.
Likely cause
Cloudflare cannot establish a timely connection to your origin.
High confidence
Grouped by what you're trying to do.
Something is failing right now.
failHTTP 522 Connection timed out
Does your origin server respond fine when you bypass Cloudflare (hit it directly)?
YesNo
Probe DNS, TLS and HTTP from outside your network and match what comes back to a likely cause.
Already have the code or the browser message? Walk its decision tree to a fix.
Find out why a request was blocked or challenged.
942100 SQL Injection Attack Detected via libinjection
CRITICAL · paranoia level 1 · REQUEST-942-APPLICATION-ATTACK-SQLI.conf
Sent from your browser
User agent, screen size, timezone and language, WebGL vendor and renderer
Map a Cloudflare WAF block to the OWASP CRS rule behind it, and decrypt the matched payload locally.
Rule data: OWASP CRS 3.3.10, the release Cloudflare's OWASP ruleset is based on
See the browser and connection signals a site's bot detection can read from you.
Planning a move to Cloudflare.
doneCertificate requirements identified
doneOrigin certificate validated
not doneCertificate chain tested
not doneSNI/hostname requirements checked
Check DNS, TLS, WAF, origin and rollback readiness before cutting over from FortiWeb, Imperva, Akamai, AWS or F5.
The reasoning behind the fixes.
Understanding HTTP 522
A 522 means Cloudflare couldn't even open a TCP connection to your origin.
Linked from 522 Connection timed out
Write-ups on TLS, DNS, WAF and Cloudflare errors, linked from the results they explain.
Observed
A scan records facts first: DNS answers, TLS details, status codes and headers.
Interpretation
Results keep what was measured apart from what it suggests.
Likely cause
Those facts, plus anything you confirm, lead to a likely cause with a stated confidence, never a guaranteed root cause.
Verify
Every diagnosis ends with a check you can run yourself, so you can confirm it before you change anything.
21 error codes and 7 scan outcomes, each with a written decision tree. OriginError is an independent project, maintained by BIJODEV on GitHub. If a diagnosis looks wrong, report it.