HTTP Header Checker: See a URL's Response Headers
Fetch a URL and see its status code and response headers.
Use via API
Fetch a public URL once (redirects not followed, body not read) and return the status line, response headers, resolved address and timing. Send JSON, get JSON back; this one reaches the network from PithLab’s server.
POST https://pithlab.com/api/v1/tools/http-header-checker
curl https://pithlab.com/api/v1/tools/http-header-checker \
-H "Authorization: Bearer $PITHLAB_KEY" \
-H "Content-Type: application/json" \
-d '{"url":"https://example.com"}'About the HTTP Header Checker
Fetch any public URL and see its HTTP status, response headers, server address and response time, with quick notes on HSTS, CSP, caching and version leaks.
How to use the HTTP Header Checker
- Enter a URL, such as https://example.com. If you leave out https://, it's added for you.
- Press Check. PithLab's server makes one request to the URL without following redirects.
- Read the status code, every response header, the server's IP address and how long it took.
- For a full security grade, paste the headers into the security headers checker.
Examples
Input
https://example.com
Output
200 OK with content-type, cache-control and other headers
Frequently asked questions
Why don't I see the page's final headers?
The checker shows the response to exactly the URL you entered and doesn't follow redirects. If you get a 301 or 302, use the redirect checker to follow the chain to the final page.
Can I check a site on my own network or localhost?
No. For safety, PithLab only connects to public addresses on ports 80, 443, 8080 and 8443, and refuses private, loopback and cloud metadata addresses.
Why does a site show different headers in my browser?
Sites can vary their response by browser, location, cookies or bot detection. PithLab sends a plain request with its own user agent and no cookies, so you see what a first-time visitor without a session gets.