Tools · Mail, DNS and sites
HTTP headers and redirects
Enter a public address. We follow the redirects and list the response headers on each hop. Cookie and credential values are shown as hidden.
Follows public redirects on ports 80 and 443. Cookie and credential values are hidden. The address is not stored.
How to use it
- Paste a public http or https address.
- Read the hop list from top to bottom. A loop or an unexpected host is the first thing to fix.
- Look for HSTS and the other security headers on the final hop.
Questions
- Are cookies stored?
- No. Cookie and credential header values are hidden in the result, and the response is not stored.
- How many redirects do you follow?
- A short chain only. A loop stops the check rather than running on.
- Can this call an address inside a private network?
- No. Private and link-local addresses are rejected.
An automated client can POST JSON to /api/tools/http-headers with url. The OpenAPI document is at /api/tools, with a short guide at /llms.txt. Nothing submitted is stored.