HTTP Header Checker
Server requestEnter a public URL to see its response status, redirect chain, and HTTP response headers. Runs server-side with strict SSRF safeguards.
How to read the results
The status is the final HTTP status code. The redirect chain lists each URL visited. Highlights surfaces common headers (Content-Type, Server, Cache-Control, CDN headers); the full header list is below.
Security by design
Only public http/https URLs are allowed. Localhost, private/reserved IPs, and cloud metadata are blocked, and the target is re-validated after DNS resolution and on every redirect.
Data source: Server-side fetch. No cookies or auth headers are sent; the response body is not downloaded. Learn about our data sources →
Frequently asked questions
Which URLs can I check?
Public http/https URLs only. Requests to localhost, private IP ranges, cloud metadata endpoints, and non-standard ports are blocked for security.
Do you follow redirects?
Yes — up to a small limit, re-validating each hop against our SSRF protections. The full redirect chain is shown.
Are cookies or auth sent?
No. We never forward cookies, authorization headers, or custom request headers, and we do not download the full response body.