# CORS Open to Any Origin

Matches records whose webdata.http.headers.access_control_allow_origin equals *.

Source: https://docs.deepinfo.com/reference/discovery/domain-search/examples/webdata-http-headers-access-control-allow-origin/

Last updated: 2026-09-26

---
`POST https://api.deepinfo.com/v1/discovery/domain-search?page_size=25`

Example 16 of 40 in **Filters › Webdata & HTTP** · [Domain Search Examples](/reference/discovery/domain-search/examples/) · endpoint: [Domain Search](/reference/discovery/domain-search/)

Tags: `field` `webdata.http.headers.access_control_allow_origin` · `operator` `eq`

Matches records whose `webdata.http.headers.access_control_allow_origin` equals `*`.

A literal `*` here is the header value, not a pattern.

In the response, look at `results[].webdata.http.headers.access_control_allow_origin`.

## Request

| Parameter | In | Value |
|---|---|---|
| `page_size` | query | `25` |
| `filters.must[0].name` | body | `webdata.http.headers.access_control_allow_origin` |
| `filters.must[0].type` | body | `eq` |
| `filters.must[0].value` | body | `*` |

```bash
curl -X POST 'https://api.deepinfo.com/v1/discovery/domain-search?page_size=25' \
  -H 'apikey: YOUR_API_KEY' \
  -H 'Accept: application/json' \
  -H 'Content-Type: application/json' \
  -d '{
  "filters": {
    "must": [
      {
        "name": "webdata.http.headers.access_control_allow_origin",
        "type": "eq",
        "value": "*"
      }
    ]
  }
}'
```

## Response

### 200 · OK

> Shortened for this page: results: 3 of 25 shown

`Content-Type: application/json` · `ratelimit-limit: 1000` · `ratelimit-remaining: 999` · `ratelimit-reset: 1` · `x-ratelimit-limit-hour: 100000` · `x-ratelimit-limit-minute: 10000` · `x-ratelimit-limit-second: 1000` · `x-ratelimit-remaining-hour: 99875` · `x-ratelimit-remaining-minute: 9997` · `x-ratelimit-remaining-second: 999` · `deepinfo-request-id: 5f0c6a8e-1b2d-4c3e-9f4a-7b8c9d0e1f2a`

```json
{
  "page": 1,
  "page_size": 25,
  "result_count": 40751227,
  "results": [
    {
      "punycode": "podpis.mshuncovce.sk",
      "unicode": "podpis.mshuncovce.sk",
      "is_idn": false,
      "subdomain": {
        "punycode": "podpis",
        "unicode": "podpis",
        "is_idn": false,
        "contains_letter": true,
        "contains_number": false,
        "contains_hyphen": false,
        "length": 6
      },
      "subdomain_last": {
        "punycode": "podpis",
        "unicode": "podpis",
        "is_idn": false,
        "contains_letter": true,
        "contains_number": false,
        "contains_hyphen": false,
        "length": 6
      },
      "subdomain_root": {
        "punycode": "podpis",
        "unicode": "podpis",
        "is_idn": false,
        "contains_letter": true,
        "contains_number": false,
        "contains_hyphen": false,
        "length": 6
      },
      "name": {
        "punycode": "podpis.mshuncovce",
        "unicode": "podpis.mshuncovce",
        "is_idn": false,
        "contains_letter": true,
        "contains_number": false,
        "contains_hyphen": false,
        "length": 16,
        "lang": "pl",
        "keywords": [
          "podpis",
          "ms",
          "huncovce"
        ],
        "keyword_count": 3,
        "latinized": [],
        "contains_confusable": false
      },
      "domain": {
        "punycode": "mshuncovce.sk",
        "unicode": "mshuncovce.sk",
        "is_idn": false,
        "name": {
          "punycode": "mshuncovce",
          "unicode": "mshuncovce",
          "is_idn": false,
          "contains_letter": true,
          "contains_number": false,
          "contains_hyphen": false,
          "length": 10,
          "lang": "en",
          "keywords": [
            "ms",
            "huncovce"
          ],
          "keyword_count": 2
        },
        "extension": {
          "punycode": "sk",
          "unicode": "sk",
          "is_idn": false
        },
        "extension_root": {
          "punycode": "sk",
          "unicode": "sk",
          "is_idn": false
        },
        "extension_sub": null,
        "extension_type": 2,
        "reserved": null,
        "premium": null,
        "registered": true,
        "whois": {
          "create_date": "2019-10-05T00:00:00Z",
          "update_date": "2025-10-09T00:00:00Z",
          "expiry_date": "2026-10-05T00:00:00Z",
          "registrar": "websupport s.r.o.",
          "registrant": {
            "name": "REDACTED FOR PRIVACY",
            "organization": "REDACTED FOR PRIVACY",
            "street": "REDACTED FOR PRIVACY",
            "city": "lubica",
            "state": null,
            "postal_code": "REDACTED FOR PRIVACY",
            "country": "sk",
            "phone": null,
            "email": null
          },
          "name_servers": [
            "ns1.websupport.sk",
            "ns2.websupport.sk",
            "ns3.websupport.sk"
          ],
          "domain_status": [],
          "whois_server": null,
          "check_date": "2026-09-06T19:28:59Z"
        },
        "whois_normalized": {
          "registrant": {
            "organization": "REDACTED FOR PRIVACY",
            "phone": null,
            "email": null,
            "email_fqdn_apex": null,
            "email_domain_apex": null
          }
        },
        "whois_last_check_date": "2026-09-06T19:28:59Z",
        "whois_create_date_historical": null,
        "whois_last_change_date": "2026-03-25T22:04:36Z",
        "whois_registrant_email_historical": null,
        "whois_privacy_enabled": true,
        "dns": {
          "a": {
            "update_date": "2026-08-27T16:33:58Z",
            "ip_addresses": [
              "37.9.175.11"
            ]
          }
        },
        "dns_last_change_date": "2026-08-07T04:00:01Z",
        "ip_history": null,
        "ssl": {
          "validity": {
            "start_date": "2014-04-10T21:10:53Z",
            "end_date": "2024-04-07T21:10:53Z"
          },
          "serial_number": "152",
          "check_date": "2026-09-07T16:29:53Z"
        },
        "ssl_last_change_date": "2022-09-26T11:11:08Z"
      },
      "type": 2,
      "subdomain_level_count": 1,
      "dns": {
        "a": {
          "update_date": "2026-09-07T16:13:18Z",
          "ip_addresses": [
            "172.66.44.94",
            "172.66.47.162"
          ]
        },
        "aaaa": {
          "update_date": "2026-09-07T16:13:18Z",
          "ip_addresses": [
            "2606:4700:310c::ac42:2c5e",
            "2606:4700:310c::ac42:2fa2"
          ]
        },
        "ns": {
          "update_date": "2026-09-07T16:13:18Z",
          "name_servers": [
            "harvey.ns.cloudflare.com",
            "kim.ns.cloudflare.com"
          ]
        },
        "mx": {
          "update_date": "2026-09-07T16:13:18Z",
          "mail_servers": []
        },
        "soa": {
          "update_date": "2026-09-07T16:13:18Z",
          "mnames": [
            "harvey.ns.cloudflare.com"
          ],
          "rnames": [
            "dns.cloudflare.com"
          ],
          "rname_emails": [
            "user@cloudflare.com"
          ]
        },
        "txt": {
          "update_date": "2026-09-07T16:13:18Z",
          "values": []
        },
        "cname": {
          "update_date": "2026-09-07T16:13:18Z",
          "values": [
            "podpis-mshuncovce.pages.dev."
          ]
        },
        "others": []
      },
      "dns_last_change_date": "2026-09-07T16:13:18Z",
      "ip_history": [
        "172.66.44.94",
        "172.66.47.162"
      ],
      "ssl": null,
      "ssl_last_change_date": null,
      "webdata": {
        "connection_status": "success",
        "html": {
          "source_code_hash": "aba09372f2b91d622335e2a82e2ddef96f753e2e9ef50a3d89131cd7a30506a6"
        },
        "http": {
          "status_code_first": 301,
          "status_code_last": 200,
          "redirection_history": [
            {
              "url": "http://podpis.mshuncovce.sk/",
              "status_code": 301
            },
            {
              "url": "https://podpis.mshuncovce.sk/",
              "status_code": 200
            }
          ],
          "external_redirection": false,
          "final_url": "https://podpis.mshuncovce.sk/",
          "final_fqdn": "podpis.mshuncovce.sk",
          "final_domain": "mshuncovce.sk",
          "headers": {
            "others": [
              {
                "name": "date",
                "value": "Mon, 07 Sep 2026 16:13:41 GMT"
              },
              {
                "name": "transfer_encoding",
                "value": "chunked"
              },
              {
                "name": "connection",
                "value": "keep-alive"
              },
              {
                "name": "nel",
                "value": "{\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}"
              },
              {
                "name": "report_to",
                "value": "{\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BguUhvpra610Ja5gAqbXVH8I%2FGt3n26zN%2BCx5HJwn61x%2B5kCWB%2Bq50jNR6LpXfp9jRnGzemmBySNgDP%2BD67cLSV3rPT6%2BuWOOgFg0sYiem96tqwpVrNDctuZWzgMkrXPfHTLXLgwyw%3D%3D\"}]}"
              },
              {
                "name": "cf_ray",
                "value": "a377008b6a23aa25-ORD"
              },
              {
                "name": "alt_svc",
                "value": "h3=\":443\"; ma=86400"
              }
            ],
            "access_control_allow_headers": null,
            "access_control_allow_methods": null,
            "access_control_allow_origin": "*",
            "cache_control": "public, max-age=0, must-revalidate",
            "clear_site_data": null,
            "content_encoding": "gzip",
            "content_security_policy": null,
            "content_type": "text/html; charset=utf-8",
            "cross_origin_embedder_policy": null,
            "cross_origin_opener_policy": null,
            "cross_origin_resource_policy": null,
            "expect_ct": null,
            "feature_policy": null,
            "last_modified": null,
            "permission_policy": null,
            "referrer_policy": "strict-origin-when-cross-origin",
            "server": "cloudflare",
            "set_cookie": null,
            "strict_transport_security": null,
            "x_content_type_options": "nosniff",
            "x_download_options": null,
            "x_frame_options": null,
            "x_permitted_cross_domain_policies": null,
            "x_powered_by": null,
            "x_xss_protection": null
          },
          "cookies": []
        }
      }
    },
    {
      "punycode": "elektron.milldesk.com",
      "unicode": "elektron.milldesk.com",
      "is_idn": false,
      "subdomain": {
        "punycode": "elektron",
        "unicode": "elektron",
        "is_idn": false,
        "contains_letter": true,
        "contains_number": false,
        "contains_hyphen": false,
        "length": 8
      },
      "subdomain_last": {
        "punycode": "elektron",
        "unicode": "elektron",
        "is_idn": false,
        "contains_letter": true,
        "contains_number": false,
        "contains_hyphen": false,
        "length": 8
      },
      "subdomain_root": {
        "punycode": "elektron",
        "unicode": "elektron",
        "is_idn": false,
        "contains_letter": true,
        "contains_number": false,
        "contains_hyphen": false,
        "length": 8
      },
      "name": {
        "punycode": "elektron.milldesk",
        "unicode": "elektron.milldesk",
        "is_idn": false,
        "contains_letter": true,
        "contains_number": false,
        "contains_hyphen": false,
        "length": 16,
        "lang": "en",
        "keywords": [
          "elektron",
          "mill",
          "desk"
        ],
        "keyword_count": 3,
        "latinized": [],
        "contains_confusable": false
      },
      "domain": {
        "punycode": "milldesk.com",
        "unicode": "milldesk.com",
        "is_idn": false,
        "name": {
          "punycode": "milldesk",
          "unicode": "milldesk",
          "is_idn": false,
          "contains_letter": true,
          "contains_number": false,
          "contains_hyphen": false,
          "length": 8,
          "lang": "en",
          "keywords": [
            "mill",
            "desk"
          ],
          "keyword_count": 2
        },
        "extension": {
          "punycode": "com",
          "unicode": "com",
          "is_idn": false
        },
        "extension_root": {
          "punycode": "com",
          "unicode": "com",
          "is_idn": false
        },
        "extension_sub": null,
        "extension_type": 1,
        "reserved": null,
        "premium": null,
        "registered": true,
        "whois": {
          "create_date": "2009-10-09T16:30:22Z",
          "update_date": "2025-09-05T05:06:08Z",
          "expiry_date": "2026-10-09T16:30:22Z",
          "registrar": "enom, llc",
          "registrant": {
            "name": "redacted for privacy",
            "organization": "redacted for privacy",
            "street": "redacted for privacy",
            "city": "redacted for privacy",
            "state": "sc",
            "postal_code": "redacted for privacy",
            "country": "br",
            "phone": "redacted for privacy",
            "email": "REDACTED FOR PRIVACY"
          },
          "name_servers": [
            "ns-1135.awsdns-13.org",
            "ns-471.awsdns-58.com",
            "ns-599.awsdns-10.net"
          ],
          "domain_status": [
            "clienttransferprohibited"
          ],
          "whois_server": "whois.enom.com",
          "check_date": "2026-07-13T22:37:50Z"
        },
        "whois_normalized": {
          "registrant": {
            "organization": "redactedforprivacy",
            "phone": null,
            "email": null,
            "email_fqdn_apex": null,
            "email_domain_apex": null
          }
        },
        "whois_last_check_date": "2026-07-13T22:37:50Z",
        "whois_create_date_historical": null,
        "whois_last_change_date": "2026-07-13T22:38:11Z",
        "whois_registrant_email_historical": null,
        "whois_privacy_enabled": true,
        "dns": {
          "a": {
            "update_date": "2026-09-02T21:08:56Z",
            "ip_addresses": [
              "191.252.62.80"
            ]
          }
        },
        "dns_last_change_date": "2026-07-26T07:27:20Z",
        "ip_history": null,
        "ssl": {
          "validity": {
            "start_date": "2025-08-14T14:44:17Z",
            "end_date": "2026-09-15T14:44:16Z"
          },
          "serial_number": "446657842318086163003083201",
          "check_date": "2026-07-29T03:19:18Z"
        },
        "ssl_last_change_date": "2025-09-09T14:14:58Z"
      },
      "type": 2,
      "subdomain_level_count": 1,
      "dns": {
        "a": {
          "update_date": "2026-09-07T08:59:19Z",
          "ip_addresses": [
            "172.237.50.44"
          ]
        },
        "aaaa": {
          "update_date": "2026-09-07T08:59:19Z",
          "ip_addresses": []
        },
        "ns": {
          "update_date": "2026-09-07T08:59:19Z",
          "name_servers": []
        },
        "mx": {
          "update_date": "2026-09-07T08:59:19Z",
          "mail_servers": []
        },
        "soa": {
          "update_date": "2026-09-07T08:59:19Z",
          "mnames": [],
          "rnames": [],
          "rname_emails": []
        },
        "txt": {
          "update_date": "2026-09-07T08:59:19Z",
          "values": []
        },
        "cname": {
          "update_date": "2026-09-07T08:59:19Z",
          "values": []
        },
        "others": []
      },
      "dns_last_change_date": "2026-09-07T16:35:55Z",
      "ip_history": [
        "104.130.127.80",
        "45.79.193.142",
        "172.233.0.215",
        "172.237.50.44"
      ],
      "ssl": null,
      "ssl_last_change_date": "2024-09-10T17:58:13Z",
      "webdata": {
        "connection_status": "success",
        "html": {
          "source_code_hash": "88ec3bc35899a98b343b9f853ffda6a058ac0c3c8ede59e76bc050312129f345"
        },
        "http": {
          "status_code_first": 301,
          "status_code_last": 200,
          "redirection_history": [
            {
              "url": "http://elektron.milldesk.com/",
              "status_code": 301
            },
            {
              "url": "https://elektron.milldesk.com/",
              "status_code": 302
            },
            {
              "url": "https://elektron.milldesk.com/login",
              "status_code": 200
            }
          ],
          "external_redirection": false,
          "final_url": "https://elektron.milldesk.com/login",
          "final_fqdn": "elektron.milldesk.com",
          "final_domain": "milldesk.com",
          "headers": {
            "others": [
              {
                "name": "date",
                "value": "Wed, 15 Jul 2026 03:23:12 GMT"
              },
              {
                "name": "transfer_encoding",
                "value": "chunked"
              },
              {
                "name": "connection",
                "value": "keep-alive"
              },
              {
                "name": "expires",
                "value": "Thu, 19 Nov 1981 08:52:00 GMT"
              },
              {
                "name": "pragma",
                "value": "no-cache"
              },
              {
                "name": "access_control_allow_credentials",
                "value": "true"
              }
            ],
            "access_control_allow_headers": null,
            "access_control_allow_methods": "GET, POST, OPTIONS",
            "access_control_allow_origin": "*",
            "cache_control": "no-store, no-cache, must-revalidate",
            "clear_site_data": null,
            "content_encoding": "gzip",
            "content_security_policy": "default-src 'self' data:; script-src * 'self' data: 'unsafe-inline' 'unsafe-eval'; object-src * 'self'; style-src * 'self' data: 'unsafe-inline'; img-src * 'self' data: https; media-src * 'self'; frame-src * 'self'; font-src * 'self'; connect-src * 'self'",
            "content_type": "text/html; charset=UTF-8",
            "cross_origin_embedder_policy": "credentialless",
            "cross_origin_opener_policy": null,
            "cross_origin_resource_policy": "cross-origin",
            "expect_ct": null,
            "feature_policy": null,
            "last_modified": null,
            "permission_policy": null,
            "referrer_policy": null,
            "server": "nginx",
            "set_cookie": null,
            "strict_transport_security": "max-age=31536000; includeSubDomains",
            "x_content_type_options": "nosniff",
            "x_download_options": null,
            "x_frame_options": null,
            "x_permitted_cross_domain_policies": null,
            "x_powered_by": null,
            "x_xss_protection": null
          },
          "cookies": []
        }
      }
    },
    {
      "punycode": "ai5xr73.aiwp42.shop",
      "unicode": "ai5xr73.aiwp42.shop",
      "is_idn": false,
      "subdomain": {
        "punycode": "ai5xr73",
        "unicode": "ai5xr73",
        "is_idn": false,
        "contains_letter": true,
        "contains_number": true,
        "contains_hyphen": false,
        "length": 7
      },
      "subdomain_last": {
        "punycode": "ai5xr73",
        "unicode": "ai5xr73",
        "is_idn": false,
        "contains_letter": true,
        "contains_number": true,
        "contains_hyphen": false,
        "length": 7
      },
      "subdomain_root": {
        "punycode": "ai5xr73",
        "unicode": "ai5xr73",
        "is_idn": false,
        "contains_letter": true,
        "contains_number": true,
        "contains_hyphen": false,
        "length": 7
      },
      "name": {
        "punycode": "ai5xr73.aiwp42",
        "unicode": "ai5xr73.aiwp42",
        "is_idn": false,
        "contains_letter": true,
        "contains_number": true,
        "contains_hyphen": false,
        "length": 13,
        "lang": "fr",
        "keywords": [
          "ai",
          "xr",
          "ai",
          "wp"
        ],
        "keyword_count": 4,
        "latinized": [],
        "contains_confusable": false
      },
      "domain": {
        "punycode": "aiwp42.shop",
        "unicode": "aiwp42.shop",
        "is_idn": false,
        "name": {
          "punycode": "aiwp42",
          "unicode": "aiwp42",
          "is_idn": false,
          "contains_letter": true,
          "contains_number": true,
          "contains_hyphen": false,
          "length": 6,
          "lang": "ro",
          "keywords": [
            "ai",
            "wp"
          ],
          "keyword_count": 2
        },
        "extension": {
          "punycode": "shop",
          "unicode": "shop",
          "is_idn": false
        },
        "extension_root": {
          "punycode": "shop",
          "unicode": "shop",
          "is_idn": false
        },
        "extension_sub": null,
        "extension_type": 1,
        "reserved": null,
        "premium": null,
        "registered": null,
        "whois": null,
        "whois_normalized": null,
        "whois_last_check_date": null,
        "whois_create_date_historical": null,
        "whois_last_change_date": null,
        "whois_registrant_email_historical": null,
        "whois_privacy_enabled": null,
        "dns": {
          "a": {
            "update_date": "2026-08-30T10:53:35Z",
            "ip_addresses": [
              "47.238.252.108"
            ]
          }
        },
        "dns_last_change_date": "2026-08-30T11:04:26Z",
        "ip_history": null,
        "ssl": null,
        "ssl_last_change_date": null
      },
      "type": 2,
      "subdomain_level_count": 1,
      "dns": {
        "a": {
          "update_date": "2026-09-06T11:40:32Z",
          "ip_addresses": [
            "47.238.252.108"
          ]
        },
        "aaaa": null,
        "ns": null,
        "mx": null,
        "soa": null,
        "txt": null,
        "cname": null,
        "others": []
      },
      "dns_last_change_date": "2026-09-07T16:26:07Z",
      "ip_history": [
        "47.239.211.169",
        "47.238.252.108"
      ],
      "ssl": null,
      "ssl_last_change_date": null,
      "webdata": {
        "connection_status": "success",
        "html": {
          "source_code_hash": "7efc0fbdfc5d377d89b27f590dcc4bbcab5c89b6c25dfe52a9c1269e9fb4f397"
        },
        "http": {
          "status_code_first": 302,
          "status_code_last": 200,
          "redirection_history": [
            {
              "url": "http://ai5xr73.aiwp42.shop/",
              "status_code": 302
            },
            {
              "url": "http://kp1diwd9.aisa1.shop/ms276m8v.jsp",
              "status_code": 302
            },
            {
              "url": "http://po5xr8d.aiwp48.shop/ms276mtf.jsp",
              "status_code": 200
            }
          ],
          "external_redirection": true,
          "final_url": "http://po5xr8d.aiwp48.shop/ms276mtf.jsp",
          "final_fqdn": "po5xr8d.aiwp48.shop",
          "final_domain": "aiwp48.shop",
          "headers": {
            "others": [
              {
                "name": "access_control_allow_credentials",
                "value": "true"
              },
              {
                "name": "date",
                "value": "Sun, 26 Jul 2026 19:35:15 GMT"
              },
              {
                "name": "connection",
                "value": "close"
              },
              {
                "name": "content_length",
                "value": "3882"
              }
            ],
            "access_control_allow_headers": null,
            "access_control_allow_methods": null,
            "access_control_allow_origin": "*",
            "cache_control": null,
            "clear_site_data": null,
            "content_encoding": null,
            "content_security_policy": null,
            "content_type": null,
            "cross_origin_embedder_policy": null,
            "cross_origin_opener_policy": null,
            "cross_origin_resource_policy": null,
            "expect_ct": null,
            "feature_policy": null,
            "last_modified": null,
            "permission_policy": null,
            "referrer_policy": null,
            "server": null,
            "set_cookie": "_wp_=<value>; Max-Age=86313600; Domain=aiwp48.shop; Path=/",
            "strict_transport_security": null,
            "x_content_type_options": null,
            "x_download_options": null,
            "x_frame_options": null,
            "x_permitted_cross_domain_policies": null,
            "x_powered_by": null,
            "x_xss_protection": null
          },
          "cookies": [
            {
              "name": "_wp_",
              "value": "<value>"
            }
          ]
        }
      }
    }
  ]
}
```

## Related Examples

- [Compressed With Gzip](/reference/discovery/domain-search/examples/webdata-http-headers-content-encoding/)
- [Other Header Name](/reference/discovery/domain-search/examples/webdata-http-headers-others-name/)
- [Final Domain](/reference/discovery/domain-search/examples/webdata-http-final-domain/)
- [Final FQDN](/reference/discovery/domain-search/examples/webdata-http-final-fqdn/)
- [Cross-Origin-Embedder-Policy](/reference/discovery/domain-search/examples/webdata-http-headers-cross-origin-embedder-policy/)
- [Final URL](/reference/discovery/domain-search/examples/webdata-http-final-url/)
