risk data for machine payments
Endpoint
cors-header-checker.underscoredone.com/check
Sends a real request to any URL you provide, attaches an Origin header, and reads back all six standard cross-origin permission headers the server returns. Tells you whether cross-origin requests are enabled at all, whether your specific origin is permitted, and shows every permission value exactly as the server sent it. Useful for finding why a browser is blocking a request, confirming a new deployment is configured correctly, or auditing whether a public API allows credentialed calls.
Score
The score is built from observations we collect ourselves: how the endpoint responds, what the envelope contains, how stable the price and the recipient are, who pays and how often. It is deterministic — the same input always produces the same result.
We do not publish the exact methodology yet. If you own this endpoint, write to us and we will show you, item by item, what drags the score down.
Recent probes
| When | Code | Latency | Scheme and network | Recipient | Price | Findings |
|---|---|---|---|---|---|---|
| 5h ago | 402 | 340 ms | exact eip155:8453 |
0xE974…2F08 | 0.010000 | clean |
| 12h ago | 402 | 317 ms | exact eip155:8453 |
0xE974…2F08 | 0.010000 | clean |
| 4d ago | 402 | 291 ms | exact eip155:8453 |
0xE974…2F08 | 0.010000 | clean |
| 4d ago | 402 | 584 ms | exact eip155:8453 |
0xE974…2F08 | 0.010000 | clean |
Reference
| URL | https://cors-header-checker.underscoredone.com/check |
| Sources | bazaar |
| Recipient per catalogue | 0xE9740820225B3918b4ddd1292C7cA4Ca0e2C2F08 |
| Price per catalogue | 0.010000 |
| Machine access | /v1/endpoint · /full · badge |
Is this your endpoint?
The score is built only from public observations. If something we recorded is wrong — say our prober hit you during maintenance — write to us. We will recheck and publish your reply next to the score.
We do not delete accurate observations. The prober makes at most one request per second per host and only asks for the payment challenge — it never pays and never takes content.