Tools / Security & Crypto
CORS Checker
See how a site answers cross-origin requests from an Origin you choose
The lookup is made by our server against public DNS; only the domain/IP you enter is used.
About this tool
Send a request with an Origin header you choose and see how the server answers. Wildcards, reflected origins and the null origin are the usual mistakes, especially when credentials are allowed.