A failed website capture does not by itself prove that the site’s origin server is down. First record the exact URL, time, HTTP status or Cloudflare error code, and any Cloudflare Ray ID. Then determine whether the failure came from the origin, Cloudflare’s edge or security challenge, or the capture browser and its network. The error code and response headers often point to the right branch, but a specific cause cannot be established without evidence from the affected request.
Start by collecting evidence from the failed capture
Before changing Cloudflare rules, firewall settings, or capture options, preserve the details of one failed attempt. Cloudflare’s 5xx guidance recommends giving the hosting provider or site administrator the error code, time and timezone, and URL. Include the following where available:
- Exact URL and resource: Record the page and, if the failure affects an image, script, stylesheet, or API request, the failing resource URL too.
- Time and timezone: Use the time of the failed request, not merely when you noticed the screenshot was missing.
- HTTP status and error text: Distinguish a Cloudflare 5xx page from an origin-generated error, a browser timeout, and a security challenge.
- Cloudflare Ray ID: Copy it from the error page if one appears. It can help an administrator search Cloudflare logs.
- Request context: Note whether the request was cached, whether it failed on every attempt, and whether it came from a normal browser, a headless browser, or a screenshot service.
Cloudflare’s per-domain Error Analytics can show error codes, URLs, source IPs, and Cloudflare data centers, but the view is based on a 1% traffic sample. It may not include an individual event. Log Explorer can search by Ray ID. An administrator should also check load balancer, cache, proxy, and firewall logs: the useful evidence may not be in the origin web server log alone.
Identify which layer is failing
Think of a capture as a request moving through several layers: the capture browser makes a request, Cloudflare receives it and applies routing and security rules, and the origin may then return the page. A failure at any layer can result in a missing or unusable screenshot.
The Tool Desk
Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →#1 Best Overall
- Read Before You Buy — No Video Output: These adapters support charging and USB 2.0 data transfer, but cannot transmit video signals. Except for standard USB webcams (which use USB data only), they are not compatible with HDMI/DisplayPort cables, video-capable USB-C hubs, or docking stations with video output.
- Convert USB-A Ports to USB-C: Designed to connect USB-C earphones, cables, flash drives, card readers, and other USB-C accessories to standard USB-A ports. Plug-and-play with no drivers or software required.
- Aluminum Alloy Housing: Built with a sturdy aluminum alloy shell that aids in heat dissipation and protects against daily wear and scratches. Designed to maintain a stable and secure connection.
- Compact & Travel-Friendly: The ultra-compact design allows the adapter to stay plugged into your device without blocking adjacent ports or adding bulk, reducing wear and tear on your original USB ports.
- 12-Month Warranty: Backed by a 12-month manufacturer warranty for peace of mind. Designed to meet strict quality control standards for reliable everyday performance.
| Evidence | Likely area to investigate | What it does not prove by itself |
|---|---|---|
| A Cloudflare 520, 521, 522, or 524 response | Origin response, origin reachability, or request timing; use the specific code to narrow it further. | It does not identify the underlying configuration fault without logs and request context. |
| A Cloudflare challenge or repeated challenge page | Security rules, bot detection, browser support, JavaScript, extensions, or network stability. | It does not necessarily mean the origin is offline. |
| Cloudflare-generated error response headers | Cloudflare’s classification of a DNS/routing, Workers runtime, or origin-connectivity failure. | The diagnostic headers are not present on every error, including errors simply forwarded from the origin. |
| A failure limited to one capture environment | Differences in browser support, scripts, extensions, user agent, network, or automation treatment. | It does not rule out a site-side rule that affects only that environment. |
If the response is a Cloudflare-generated error page, inspect the cf-error-type and cf-error-origin headers. Cloudflare documents these as diagnostic headers for its generated error pages, with error types covering DNS or routing errors, Workers runtime failures, and origin connectivity failures. They are not universal labels for every error response. Collect them with curl -v, the browser’s Network panel, or a HAR file.
Use the error code to choose the next check
Cloudflare’s 5xx codes describe different failure conditions. Treat them as a starting point for diagnosis, not as a complete root-cause report.
Rank #2
- 5-in-1 USB-C Hub: Experience comprehensive connectivity featuring a Power Delivery input, two USB-A 2.0 ports, a USB-A 3.0 port, and an HDMI port. (Note: The USB-C power delivery input port is only for connecting an external wall charger to power your laptop and cannot power peripheral devices.)
- 90W Pass-Through Charging: Achieve optimal charging with 90W pass-through power to your laptop, supported by a total input of 100W, with the hub reserving 10W for operational efficiency. (Note: Wall charger not included.)
- Quick Data Transfers: Accelerate your productivity with rapid data transfers using a high-speed 5Gbps USB 3.0 port and two 480Mbps USB 2.0 ports.
- 4K HDMI Display: Enhance your visual experience with a hub capable of delivering 4K resolution at 30Hz in both mirror and extend modes. Please note that this hub is compatible with MacBook (macOS 12 and newer), Windows 10 and 11, ChromeOS, and laptops equipped with DP Alt Mode and Power Delivery. Note: This device is not compatible with Linux.
- What You Get: Anker USB-C Hub (5-in-1, 4K HDMI), welcome guide, 18-month warranty, and our friendly customer service.
| Code | What Cloudflare reports | Checks for the site owner or administrator |
|---|---|---|
| 520 | The origin returned an empty, unknown, or unexpected response. | Check origin and intermediary logs, response headers, and whether the origin process crashed or returned a malformed or empty response. Confirm that origin-side firewalls and security plugins allow Cloudflare IPs. Cloudflare also lists headers larger than 128 KB, incorrect origin HTTP/2 setup, and unexpected Authentication Origin Pull configuration as possible causes. |
| 521 | The origin refused the connection. | Confirm that the origin application is running and listening on the port required by the configured SSL/TLS mode. Review origin logs and security software for blocks or rate limits affecting Cloudflare IP ranges. |
| 522 | Cloudflare timed out while connecting to the origin or waiting for acknowledgement. | Check for an offline or overloaded origin, dropped packets, blocked or rate-limited Cloudflare IPs, disabled keepalives, and an incorrect origin IP in Cloudflare DNS. Cloudflare describes one condition as no SYN+ACK within 19 seconds after sending a SYN, and another as no ACK for the resource request within 90 seconds after connection establishment. |
| 524 | Cloudflare connected to the origin, but the origin did not return an HTTP response in time. | Investigate slow origin work, long-running queries, and resource pressure. Cloudflare documents a default 125-second Proxy Read Timeout. Its documented Proxy Write Timeout is 30 seconds, or 6.5 seconds for Cloudflare Images. |
Be careful interpreting 520 analytics
For a 520 investigation, Cloudflare warns that OriginResponseStatus = 0 is ambiguous. Check CacheStatus alongside it: hit or revalidated means the request did not contact the origin, while miss or expired with status 0 indicates a failed origin connection. Do not treat the status field alone as proof that the origin failed.
Determine whether a security challenge is blocking the capture
Cloudflare challenges may be triggered by security features such as threat score, IP reputation, bot detection, custom WAF rules, Browser Integrity Check, or Challenge Passage behavior. A capture browser can fail to complete one if JavaScript or challenge scripts are blocked, the browser is unsupported or outdated, an extension interferes, or the network is unstable.
Rank #3
- Sleek 7-in-1 USB-C Hub: Features an HDMI port, two USB-A 3.0 ports, and a USB-C data port, each providing 5Gbps transfer speeds. It also includes a USB-C PD input port for charging up to 100W and dual SD and TF card slots, all in a compact design.
- Flawless 4K@60Hz Video with HDMI: Delivers exceptional clarity and smoothness with its 4K@60Hz HDMI port, making it ideal for high-definition presentations and entertainment. (Note: Only the HDMI port supports video projection; the USB-C port is for data transfer only.)
- Double Up on Efficiency: The two USB-A 3.0 ports and a USB-C port support a fast 5Gbps data rate, significantly boosting your transfer speeds and improving productivity.
- Fast and Reliable 85W Charging: Offers high-capacity, speedy charging for laptops up to 85W, so you spend less time tethered to an outlet and more time being productive.
- What You Get: Anker USB-C Hub (7-in-1), welcome guide, 18-month warranty, and our friendly customer service.
- Reproduce the URL in a current supported browser with JavaScript enabled.
- Temporarily disable extensions, or retry in a private window.
- Try another browser or device, then a different network if practical.
- If the challenge continues, preserve the Network log while reproducing it and save a HAR and browser console log.
- Give the site administrator the Ray ID, time and timezone, exact URL, and sanitized artifacts so they can compare the event with security and request logs.
A 401 response on a Private Access Token request, by itself, does not prove that the visitor was blocked or that the challenge is misconfigured. Cloudflare says the browser can fall back to a standard challenge.
Choose the right diagnostic artifact
Use the artifact that answers the question you have, rather than collecting every kind of log. Cloudflare recommends these approaches for common troubleshooting symptoms:
Rank #4
- Dual Converters, Infinite Potential：Includes 2× USB C male to USB A female adapters and 2× USB A male to USB C female adapters. Perfect for a wide range of uses—tablets with Bluetooth keyboards, expand USB ports on macbook, and more. Two different converters for all your daily needs
- Next-Level 10Gbps & 3A Charging: No more slow 480Mbps, this usb to usb c adapter has a transfer speed of up to 10Gbps, allowing you to do more transferring in less time. This usb adapter fits both USB A and USB C charger, supporting up to 3A fast charging
- Upgraded Exquisite Craftsmanship: With an aluminum alloy housing and metal connector, the usbc to usb adapter is extremely durable and sturdy. Rigorously tested to withstand more than 10,000 times of plugging and unplugging, ensuring long-lasting performance
- Broad Compatible: The usb c to usb adapter widely supports all USB C/ USB A devices like laptops, tablets, cellphones, car chargers, and phone chargers. Such as compatible with MacBook Pro/Air 2023/2022, Thunderbolt 4/3 Devices,Apple MagSafe Watch 9/8/7/SE/Ultra, iPad Pro 2022/2021, Samsung Galaxy S23/S20/S10, and iPhone 17/16/15 Pro. Plug and play
- Please Note: To reach 10Gbps speed, keep the cable under 3.3 ft. For USB A Male to USB C adapters, try flipping the USB C connector. USB C Male to USB A adapters support bidirectional 10Gbps transfer within 3.3 ft
- Visual defects, broken elements, slow pages, or a sequence of browser requests: Capture a HAR from the browser’s Network panel. A HAR can contain cookies, authorization data, and other sensitive information; sanitize it before sharing.
- JavaScript errors or scripts that do not finish: Save the browser console log alongside the HAR.
- Status, headers, and response timing: Make a direct request with
curl. This also helps distinguish browser-specific behavior from an HTTP response problem. - Suspected network-path problem: Use traceroute or MTR to inspect the route.
- Packet loss, connection resets, or handshake failures: A packet capture may be useful for a network administrator.
For a quick HTTP check, replace the example URL with the affected page:
curl -v --max-time 150 -o /dev/null -w 'nHTTP %{http_code} total=%{time_total}sn' 'https://example.com/path'
Free tools Windows power users keep installed
One-click scans. No signup required.
Best Value
- 5-in-1 Connectivity: Equipped with a 4K HDMI port, a 5 Gbps USB-C data port, two 5 Gbps USB-A ports, and a USB C 100W PD-IN port. Note: The USB C 100W PD-IN port supports only charging and does not support data transfer devices such as headphones or speakers.
- Powerful Pass-Through Charging: Supports up to 85W pass-through charging so you can power up your laptop while you use the hub. Note: Pass-through charging requires a charger (not included). Note: To achieve full power for iPad, we recommend using a 45W wall charger.
- Transfer Files in Seconds: Move files to and from your laptop at speeds of up to 5 Gbps via the USB-C and USB-A data ports. Note: The USB C 5Gbps Data port does not support video output.
- HD Display: Connect to the HDMI port to stream or mirror content to an external monitor in resolutions of up to 4K@30Hz. Note: The USB-C ports do not support video output.
- What You Get: Anker 332 USB-C Hub (5-in-1), welcome guide, our worry-free 18-month warranty, and friendly customer service.
Read the response status and headers, including cf-error-type and cf-error-origin if they are present. Compare repeated results and times rather than assuming one request represents every visitor. A direct curl request does not execute page JavaScript or behave like a full browser, so it cannot settle every challenge or rendering question.
Or skip the browser setup
If the goal is to compare a browser capture with a separate capture environment, ScreenshotNeo can provide a second data point. It is a website screenshot API and MCP server for developers. It does not diagnose or bypass Cloudflare security controls; a challenge or failed page may still be detected as such. One GET request returns an image or PDF. The example saves a WebP capture of the page; see the ScreenshotNeo API documentation for request options and response details.
curl -G "https://api.screenshotneo.com/v1/shot" -d access_key=YOUR_API_KEY --data-urlencode url=https://example.com/path -o shot.webp
ScreenshotNeo removes cookie and consent banners from more than 60 known platforms, plus newsletter popups and chat widgets, before capture; each of those steps can be turned off. Bot checks, blank pages, timeouts, failed loads, and cache hits are not billed, and the response identifies the page verdict and billing status in X-Page-Verdict and X-Billed headers. The product also has an MCP server with take_screenshot, get_page_info, and capture_pdf tools for AI agents. The free plan includes 1,000 screenshots per month without a card; paid plans start at $5 for 3,000 screenshots.
Quick wins for a faster PC:
Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Clear out junk files and repair common Windows errorsFree Scan →Sign up free for 1,000 screenshots a month, with no card required.
Common troubleshooting mistakes
- Changing origin settings before saving the failure details: This can make the original condition harder to reconstruct. Record the URL, code, time, timezone, and Ray ID first.
- Assuming every Cloudflare-branded page is an origin error: Check whether it is a challenge, an edge-generated error, or a response forwarded from the origin.
- Using one sampled analytics event as a complete record: Error Analytics uses a 1% traffic sample. Correlate its view with Ray ID searches and logs from the relevant infrastructure.
- Sending an unsanitized HAR publicly: Review and redact credentials, cookies, tokens, and private URLs before sharing it.
- Treating a single browser or API result as a root-cause finding: A different result can narrow the problem to an environment or rule, but site logs and request evidence are needed to establish the cause.
Frequently Asked Questions
Does a Cloudflare 5xx error mean my website is offline for everyone?
No. A capture records a particular request, route, and moment. Compare the same URL from another browser or network and check the site’s Cloudflare and origin logs before concluding that the site is unavailable to all visitors.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
