Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

A screenshot failure does not prove that Cloudflare is down or that your origin is offline. The failure may be a Cloudflare incident, DNS or Workers error, an origin connectivity problem, or an HTTP response generated by your own application. Diagnose the layer by checking the status incident, HTTP headers, Cloudflare error codes, origin behavior, and dependent assets—not by looking at the screenshot alone.

What a failed screenshot actually tells you

A browser or screenshot runner can receive an error page, a blank document, a partially rendered page, or a normal-looking HTML response with missing CSS, JavaScript, fonts, images, or API data. Those outcomes point to different layers:

  • Cloudflare edge: an incident, routing problem, cache behavior, or edge-generated 5XX response.
  • DNS or Workers: an unresolvable target, invalid record, Worker exception, or Worker resource limit.
  • Origin connectivity: the origin is not listening, is unreachable from Cloudflare, rejects Cloudflare traffic, or has a TLS problem.
  • Origin application: your server responds with an error, times out under load, crashes, or returns malformed HTTP.
  • Page dependencies: the document loads, but asset or API requests fail, making the screenshot appear broken.

Start with the exact URL, UTC time, timezone, screenshot runner region, browser version, HTTP status, and failure shape. Record whether the result was blank, a branded Cloudflare error, an unbranded error, or a page with missing elements. Cloudflare asks for the specific code, time, and URL when troubleshooting a 5XX error.

Check for a Cloudflare incident before changing DNS

Query Cloudflare’s official Status API and open its component and region view. Components are reported as operational, degraded performance, partial outage, or major outage. Match the incident’s start time and affected geography with your screenshot job. A regional incident can explain why one runner fails while another succeeds.

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
#1 Best Overall
Feit Electric Smart Wi-Fi Plug - Alexa and Google Home Compatible - 1 Count
  • WIFI ENABLED TO CONTROL FROM ANYWHERE – Transform your home into a smart home with the Feit Electric Smart Wi-Fi Plug. Remotely turn on or off lights, fans, coffee makers, or other home appliances from your smartphone or tablet. Works seamlessly with Alexa and Google Home, giving you effortless voice control without needing a separate hub. Manage your devices anytime, whether you’re at home, at work, or traveling.
  • SIMPLE SETUP, NO HUB REQUIRED – Enjoy the convenience of smart home automation without extra equipment. The plug connects directly to your 2.4 GHz Wi-Fi network, making installation fast and easy. Plug it in, download the Feit Electric app, follow the simple steps, and your devices are instantly connected. Perfect for beginners or anyone looking to expand their smart home ecosystem with minimal hassle.
  • SET YOUR ROUTINE & SAVE ENERGY – Save energy, stay organized, and automate daily routines with customizable schedules and timers. Set your lamps, heaters, or appliances to turn on and off automatically at specific times, ensuring your home is always comfortable and efficient. Ideal for morning routines, evening wind-downs, or holiday lighting, giving you peace of mind and energy savings without constant manual operation.
  • ENHANCED SAFETY & CONVENIENCE – Protect your home and appliances with the Feit Electric Smart Plug’s durable design and safety features. Its compact size fits easily into standard indoor outlets without blocking other sockets. With real-time app control and notifications, you can monitor appliance activity and prevent energy waste. Ideal for families, pet owners, or anyone seeking a smarter, safer, and more convenient home setup.
  • RELIABLE 2.4GHz WI-FI PERFORMANCE – Designed to work exclusively on 2.4 GHz networks, this smart plug provides stable connectivity for smooth operation of all your devices. Avoid interruptions caused by incompatible networks, ensuring your appliances respond instantly when controlled via the app or voice commands. Perfect for indoor home use, it supports up to 15 amps, handling heavy-duty appliances safely and reliably.

Do not immediately switch nameservers, disable the proxy, or edit records during a suspected provider incident. Such changes can remove useful evidence and create a second outage. Save the current DNS and proxy configuration first. If the status page shows no matching event, continue with request-level evidence rather than assuming the incident is hidden.

Read the HTTP response instead of trusting the image

Capture headers and body with curl

Run the same URL and path that the screenshot job used. Save both headers and the response body:

curl -sS -D headers.txt -o body.html https://example.com/path

Repeat from a network or region comparable to the screenshot runner when possible. Inspect the status line, cf-ray, cache-related headers, content type, redirects, and any Cloudflare diagnostic headers. Preserve the UTC timestamp alongside the files.

Use browser DevTools for visual failures

Open the URL in an Incognito or Private window, then use DevTools’ Network panel. Reload with the panel open and inspect the document request plus every failed asset. A document with status 200 is not recovery if its stylesheet, script, font, image, or API calls fail. Export a HAR when you need the complete request sequence. Cloudflare recommends HAR files for visual issues, broken elements, slow loads, and cases where the full browser request sequence matters.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Sanitize the HAR before sharing it: remove cookies, authorization headers, session identifiers, payment data, private keys, and query parameters that contain secrets. Keep the request URL, status, timing, response headers, and failure sequence intact.

Rank #2
Wintertion1U/Desktop/Rackmount Firewall Hardware,OPNsense, VPN, Network Security Appliance, Router PCN2600 D2700, 4 x Gigabit LAN, COM, VGA, Fan, 0 RAM, 0 Storage (Desktop Type, 4G RAM 64G SSD)
  • equipped with atom n2600 d2700 processor, compatible with many freebsd based router systems, linux distros, or win.os supported, easy configuration and management
  • Please note, this is a barebone only. A system memory, a storage drive and an operating system are needed to complete this system
  • 13-19 inches 1u, 50w power, with power cord, make sure to use a big brand memory and ssd/hdd with quality assurance
  • Designed with console, 2 x usb, 4 x lan, vga, power switch, size at 290 x 180 x 44mm
  • There are 2 inside reserved fans on chassis, which could be removed freely or be turned on in a high temperature environment to ensure the best function of the product

Interpret Cloudflare diagnostic headers

Cloudflare-generated responses may include cf-error-type and cf-error-origin. The values provide a faster classification than the screenshot:

  • 1000: DNS resolution failure.
  • 1016: origin DNS error.
  • 1101 or 1102: a Workers runtime failure or resource-limit condition.
  • 52x classes: origin connectivity or TLS-related problems, depending on the specific code.

A branded Cloudflare 502 or 504 generally means Cloudflare is reporting an origin response. An unbranded blank 502 or 504 can indicate a response generated at Cloudflare’s edge. For either case, inspect origin load, crashes, network failures, and timeouts rather than treating the number as a diagnosis by itself.

Separate edge, DNS, and origin behavior

Compare the proxied request with a controlled origin test

If you control the zone and origin, test the origin directly with the correct hostname and Host header, or temporarily use DNS-only for a controlled comparison. Cloudflare’s evidence-gathering guidance uses direct-origin curl tests to determine whether an error is from Cloudflare or from the origin. Preserve the original proxy state, restrict the test, and roll back any temporary DNS or proxy change immediately afterward.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Interpret the comparison in four axes:

Comparison What it can reveal
Cloudflare-proxied versus direct origin Whether the failure appears only at the edge or also reaches the origin.
Affected region versus healthy region Whether the problem is regional, global, or tied to a runner network.
Document versus dependent assets Whether the page shell works while CSS, JavaScript, fonts, images, or APIs fail.
Edge status versus origin status Whether Cloudflare received a usable origin response or generated the error itself.

Do not mistake a direct-origin success for complete recovery

A direct request can succeed while the proxied path fails because Cloudflare applies different TLS, firewall, cache, Worker, or routing behavior. Conversely, an origin can work from your office while Cloudflare cannot reach it. Keep both captures, including their timestamps and headers, so your host can correlate them with server and edge logs.

Cloudflare error codes and the next action

Signal Likely class Next checks
1000 or 1016 DNS record or origin-target problem Inspect records and CNAME targets; look for a record pointing at a Cloudflare IP or an unresolvable origin target.
1101 or 1102 Workers exception or limit Inspect Worker exception and resource-limit telemetry; when safe, test the route without the failing Worker.
521–526 Origin connectivity or TLS/certificate class Verify that the origin is listening and reachable from Cloudflare and presents the expected certificate.
502 or 504 Origin-generated or Cloudflare-generated response Use branding, headers, and a direct-origin comparison; inspect origin load, crashes, network failures, and timeouts.
520 Unexpected or unusable origin response Collect the full evidence set and correlate cache state with origin status before blaming the origin.

Handle Error 520 as a special case

For a 520, collect the exact URL, cf-ray, /cdn-cgi/trace output, UTC time, runner region, and two HAR files: one with Cloudflare enabled and one with the proxy temporarily disabled under controlled conditions. In Log Explorer or Logpush, compare edgeResponseStatus, originResponseStatus, and CacheStatus.

Rank #3
Sale
Shelly Plus 1PM | WiFi Smart Relay Switch with Power Metering | Home Automation | Bluetooth Gateway | Compatible with Alexa & Google Home | No Hub | Wireless Lighting Control (2 Pack)
  • Shelly Plus 1 PM is a Wi-Fi smart relay switch with 1 channel, up to 16A with power metering that can be used also as a WiFi repeater and Bluetooth gateway. Shelly Plus 1PM can be used to monitor the consumption and take control of home appliances, electric circuits, and office equipment individually.
  • Automate electrical appliance and control - With Shelly Plus 1PM you can automate any electrical appliance in your home and control it remotely. Shelly Plus 1PM can control appliances with a large load which makes it perfect for kitchen appliances and domestic systems monitoring and control. You can get precise measurements of the power consumption of each appliance and switch in on/off remotely, no matter where you are.
  • Set and be prepared for everything - Reveal the full potential of Shelly Plus 1PM by combining it with other devices from your home network! Set Shelly Plus 1PM to activate custom scenes based on hour, light, or various occurrences. For example, you can set Shelly Door/Window sensor to report a porch door opening and activate Shelly Plus 1PM to turn on the hot tub heaters only in the hours after 8 pm.
  • Shelly Customer Service - Shelly is one of the fastest-growing Smart Home brands in the world with devices, providing solutions for the automation of private homes, buildings and businesses. We provide our customers with professional support and a 3 years device warranty.
  • Shelly Smart Control App will help you control your Shelly devices remotely and will send notifications for all automated events in your home. You can easily configure devices and manage their settings individually, or you can create personalized scenes by combining Shelly devices to trigger certain actions in your home automation.

Never interpret OriginResponseStatus=0 by itself. With a cache hit or revalidation, zero can simply mean that Cloudflare did not contact the origin. With a cache miss or expired object, zero indicates that Cloudflare contacted the origin but received no usable HTTP response. That distinction prevents an incorrect origin escalation.

Build an evidence package your host can use

Put the following in one incident folder, using UTC in filenames:

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
  1. The exact screenshot URL, including path and relevant query string.
  2. The failure timestamp, timezone, screenshot runner region, and browser version.
  3. The screenshot or PDF output, plus a note describing blank, error-page, or missing-asset symptoms.
  4. The complete response headers and saved body from the matching curl request.
  5. The cf-ray value and any cf-error-type or cf-error-origin values.
  6. A sanitized HAR from the failing browser session.
  7. A controlled direct-origin or DNS-only comparison, if you are authorized to run it.
  8. Cloudflare status incident details and the before/after times of any configuration change.

Send the package to the hosting provider or site administrator. Cloudflare’s stated guidance for most 5XX errors is to contact the host or site administrator first with specific diagnostic data.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Verify recovery correctly

After an incident or configuration fix, rerun the identical screenshot URL from the same region and browser profile. Check the main document and every dependency: CSS, JavaScript, fonts, images, and API calls. Compare the new status, headers, cf-ray, and HAR with the failure capture. A landing page returning 200 is not sufficient if the rendered page is still incomplete.

Keep the incident identifier, timestamps, before-and-after artifacts, and representative ray values for trend analysis. If failures recur, schedule synthetic browser checks from more than one region and alert separately on document status, asset failures, and visual completeness.

Rank #4
Dualcomm Raspberry Pi Network TAP Appliance
  • Portable 100M/1G Network TAP Appliance for remote capture of data traffic
  • Integrated with a Raspberry Pi 4 module (8GB RAM and 64GB Micro SD Card)
  • Can be used as a standalone 100M/1G network TAP with the external monitor port
  • Dual DC power inputs for enhancing overall system availability

Or skip the browser setup

ScreenshotNeo is the first service to try for automated captures because it removes consent banners, newsletter popups, and chat widgets before capture, bills only clean shots, and has a $5 paid plan for 3,000 shots. It can also expose whether a response was a clean result, a bot check, a blank page, a timeout, a failed load, or a cache hit through the X-Page-Verdict and X-Billed response headers.

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Make one GET request (see the ScreenshotNeo API documentation):

curl -G 'https://api.screenshotneo.com/v1/shot' -d access_key=YOUR_API_KEY --data-urlencode url=https://stripe.com -o shot.webp

Python:

import requests
r = requests.get('https://api.screenshotneo.com/v1/shot', params={'access_key': 'YOUR_API_KEY', 'url': 'https://stripe.com'}, timeout=90)
open('shot.webp', 'wb').write(r.content)

Node.js:

const q = new URLSearchParams({ access_key: 'YOUR_API_KEY', url: 'https://stripe.com' });
const res = await fetch(`https://api.screenshotneo.com/v1/shot?${q}`);

For outage diagnosis, useful options include full-page capture with lazy images loaded, a CSS-selector element capture, device presets or custom viewports, dark mode, retina scale, custom headers, cookies, user agents and Authorization, waits for a selector, delay or network idle, request and resource blocking, custom JavaScript and CSS, clicks before capture, hidden selectors, timezone and geolocation, transparent backgrounds, resizing, a chosen cache TTL, signed image links, asynchronous jobs with signed webhooks, bulk capture of up to 100 URLs per call, a usage API, and an OpenAPI specification. PNG, JPEG, WebP, and PDF output are supported; PDF requests can set paper size, margins, landscape mode, and page ranges. Familiar parameter names used by other screenshot APIs also work, which reduces migration work.

Every plan includes every feature. The current prices are:

Plan Allowance and price
Free 1,000 shots per month, no card
Starter $5 for 3,000 shots
Growth $15 for 15,000 shots
Pro $39 for 60,000 shots
Scale $99 for 250,000 shots
Business $249 for 1,000,000 shots

Yearly billing gives two months free. Failed loads, bot checks or CAPTCHAs, blank pages, timeouts, and cache hits are not billed, so repeated diagnostic captures do not charge for those outcomes. ScreenshotNeo also provides an MCP server with take_screenshot, get_page_info, and capture_pdf tools for Claude, Cursor, and other MCP clients. Start with 1,000 free screenshots a month and no card.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Frequently Asked Questions

Can a cached screenshot hide a recovered or still-broken page?

Yes. A cache hit can return an older successful object, so use a cache TTL or bypass strategy appropriate to your test and compare the response headers with a fresh run.

Do screenshot jobs need the same region for before-and-after evidence?

Use the same runner region whenever possible; otherwise a regional routing or connectivity difference can look like a configuration fix.

Quick Recap

Bestseller No. 4
Dualcomm Raspberry Pi Network TAP Appliance
Dualcomm Raspberry Pi Network TAP Appliance
Portable 100M/1G Network TAP Appliance for remote capture of data traffic; Integrated with a Raspberry Pi 4 module (8GB RAM and 64GB Micro SD Card)
$949.00

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.