HTTP Headers & Redirect Checker
See redirects, response headers and a security grade for any URL.
How to use the header checker
- Enter a web address. You can leave out
https://; addhttp://to test the redirect to HTTPS. - Press Check headers.
- Read the redirect chain, the security grade and the full list of response headers.
We follow up to 10 redirects one by one, so you can see each step. Only public websites on the standard ports can be checked.
Status codes you will see
| Code | Meaning |
|---|---|
| 200 | OK: the page was delivered |
| 301 | Moved permanently: search engines pass ranking to the new address |
| 302, 307 | Moved temporarily |
| 308 | Moved permanently, keeping the request method |
| 304 | Not modified (cached copy still valid) |
| 403 | Forbidden: the server refuses the request, sometimes because it blocks automated checks |
| 404 | Not found |
| 410 | Gone permanently |
| 429 | Too many requests |
| 500, 502, 503 | Server errors |
Redirects and SEO
- Use one 301 redirect from every old address to its final address; chains of several redirects waste time and crawl budget.
- Pick one version of your site (with or without
www, always HTTPS) and redirect the others to it. - Avoid redirect loops, which the checker detects.
Security headers
| Header | Why it matters |
|---|---|
| Strict-Transport-Security | Makes browsers always use HTTPS for your site |
| Content-Security-Policy | Restricts where scripts and other content may load from |
| X-Content-Type-Options | nosniff stops browsers from guessing file types |
X-Frame-Options or CSP frame-ancestors |
Prevents clickjacking through frames |
| Referrer-Policy | Limits how much of your URLs other sites see |
| Permissions-Policy | Turns off browser features your site does not use |
The grade (A to F) weighs these headers on the final page. Add missing ones in your web server, hosting control panel or CDN.
Frequently asked questions
Why do I get a 403 for a site that works in my browser?
Some sites block requests that do not come from a full browser. The headers shown are still what that server returns to automated clients.
Does the checker see the page content?
No. We read only the status and headers and discard the body.
What does the "server reveals its software" note mean?
Headers like Server or X-Powered-By can show software versions, which helps attackers find known weaknesses. Most servers can hide them.
Other free IP and network tools
IP Lookup
Location, network owner and ASN of any IP address or domain.
ISP Lookup
See which internet provider your connection, or any IP address, belongs to.
VPN Leak Test
One-click check of your VPN: IP, IPv6, WebRTC, timezone and language leaks.
VPN & Proxy Check
Find out if an IP belongs to a VPN, proxy or Tor exit node.
Open Port Checker
Test whether a port on your connection is open to the internet.
Online TCP Ping
Measure how fast a server answers on a port, from our worldwide network.
Blacklist Check
Test an IPv4 address against 20+ spam blacklists.
DNS Lookup
A, AAAA, MX, NS, TXT, CNAME, SOA and CAA records of a domain.
DNS Propagation Checker
Compare a DNS record across 13 public resolvers at once.
Website IP Lookup
Find the IP addresses, hosting company and CDN of any website.
Reverse DNS
Find the hostname behind an IP address.
WHOIS Lookup
Owner and registration data for a domain or IP address.
Domain Age Checker
How old a domain is, when it was registered and when it expires.
SPF, DKIM & DMARC Checker
Check and generate the email authentication records of a domain.
Email Header Analyzer
Trace where an email came from and check SPF, DKIM and DMARC.
SSL Certificate Checker
Expiry date, issuer and covered names of a website certificate, plus HTTPS checks.
Is It Down?
Check if a website is down for everyone or just for you.
Subnet Calculator
Network, broadcast, host range and subnets for IPv4 and IPv6.
IP Converter
Convert IPs to decimal, hex and IPv6, and CIDR blocks to address lists.
Bulk IP Lookup
Look up to 25 IP addresses at once and export the results as CSV.
Browser Fingerprint
See what your browser shares with every site you visit.
WebRTC Leak Test
Check if your real IP leaks past your VPN through WebRTC.
IP Widget for Your Site
Free "What is my IP" box for your website or blog, with one line of code.