HTTP Headers
Fetch a URL from our servers and display the HTTP status line and every response header, parsed and raw.
- Runs on our servers
- Free to use
- API available →
About this tool
Response headers tell you what server software answers, how the content is cached, which cookies are set, where a redirect points and which security policies are enforced. This tool fetches the URL from our servers and shows the status line and every header both as a table and as raw text, without following redirects so that 301/302 answers are visible.
It is the quickest way to debug caching problems, verify a CDN is in front of a site, or confirm a redirect rule. For page content as well, see the Web Sniffer.
This is what a result looks like (trimmed):
$ curl -sI https://www.example.com/
HTTP/2 200
accept-ranges: bytes
content-type: text/html
etag: "84238dfc8092e5d9c0dac8ef93371a07:1736799080.121134"
last-modified: Mon, 13 Jan 2025 20:11:20 GMT
cache-control: max-age=3236
content-length: 1256How to use it — quick steps
- 01
Enter the url
Type or paste the url in the field above, for example https://www.example.com/
- 02
Press "Get headers"
Press "Get headers" or Ctrl + Enter. The result appears below in a few seconds. Results can be copied.
- 03
Read the result
It appears in the dark panel under the form in a few seconds. Every block has [copy] and other actions.
Key features of this tool
External lookups
The lookup runs from our infrastructure, so you see what the public internet sees without exposing your own IP address or network.
Fast and cached
Results come back in seconds; identical lookups are cached for a few minutes to keep the service fast and responsive for everyone.
Easy to reuse
Every result block can be copied with one click or downloaded as a text file, and tables can also be saved as CSV for your reports.
Frequently asked questions
Which request is sent?
A GET request with a browser-like user agent and gzip accepted, without following redirects, so you see the headers of the exact URL you entered including any Location header.
Why are some headers missing compared with my browser?
Servers vary responses by user agent, cookies and language. Headers set by the browser or by extensions never appear here because this is the raw server response.
How do I check security headers specifically?
Use the Security Headers Analyzer, which grades HSTS, CSP, X-Frame-Options and the rest with recommendations.