dnstrace.devRun lookup

Infrastructure guide

An edge address is not an origin

Correct infrastructure detection starts by naming the layer that produced each signal.

Updated 30 August 2026

A Cloudflare, Fastly or CloudFront address normally identifies the public delivery edge. It does not reveal the private server or platform behind that edge. Treating the edge ASN as the origin host creates confident but false results.

Strong evidence

Provider-specific response headers and CNAME targets are strong evidence for the service answering publicly. Published IP ranges and ASN ownership support network attribution. Nameservers identify the DNS operator, which may be entirely separate from delivery and hosting.

What remains unknown

A reverse proxy can connect to an origin by private address, tunnel or protected hostname. Unless the operator publishes another verifiable signal, the correct answer is that the origin is hidden, not a guess based on a historical record or shared infrastructure.

Inspect a live HTTPS response →