HTTP headers
HTTP /api/v1/http/headersCapture every response header, follow redirects, time each hop.
https://www.google.com/finance/sitemap.xml
200
1 hop
191 ms
Final response headers (19)
| content-type | text/xml; charset=utf-8 |
| vary | Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site |
| expires | Sat, 31 Oct 2026 04:59:23 GMT |
| date | Sat, 31 Oct 2026 04:59:23 GMT |
| cache-control | private, max-age=3600 |
| p3p | CP="This is not a P3P policy! See g.co/p3phelp for more info." |
| content-security-policy | script-src 'report-sample' 'nonce-MBnqhI-Su37sHYd5oaeLMg' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /finance/_/FinHubUi/cspreport;worker-src 'self', require-trusted-types-for 'script';report-uri /finance/_/FinHubUi/cspreport |
| permissions-policy | ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=* |
| cross-origin-opener-policy | same-origin-allow-popups |
| accept-ch | Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version |
| cross-origin-resource-policy | same-site |
| reporting-endpoints | default="/finance/_/FinHubUi/web-reports?context=eJwV03lczfn-B_Do03kllDUlibikIU1k75zzPee7aTJatJ5zRJFdSpaMXbJmaWxjyjbFT7iWMRrbWKaaGSZMki0NI2Zx_WbGJMsw7uv-8Xx8-_b5vtdPue3qEejt7BRMgW4dnaICOjqtG9jDaea_LE7ve4wUj10iReb8SJHzn0iRvD5KRF-NEoFvo8TcvGjxMjBGZI-IEQ8XxYjDl2NE72sxwuN1jJi6ZJSo9o4Vz3rEio5SnHg6MU6MSo8TrTPjRPfSODH_cZwo_CdORIXHC9uiePFgXbzoXR8vBngliEDvBLGmZ4JYaEkQVVqCODkjQczITxBexQni8d4EIZUlCLeqBKE3TRQ7WiSK8zSpTaII8UwU60ITxQb6cXCiOGpOFIPHJ4qU6Yni-sZE8fJAoph2JlHcrksUGf5Jok90kuhiSxLqnCQRTzsWJYn7a5JEzpYkMf37JJFYmySGPUgS7RuTRJCzTYym5F42UR5iE6uG2MTmYTaxT7GJUNUmyuw2kZdmEyeoZJpNXEi3iQpaPdMm1pJflk3ErrUJ5_U2YfvKJp5W2MQnlTbh3dcuBkXYxRAaRpE2u7Am28XebLuYPs8u9iy3i9kr7OLKZrsYU2wXHvvtwpM6kBe1OGEX7tSWEr-2i78v28Vbavq9Xey-YReHb9nFD3fs4lGtXbSps4vSn-3C9U-7eNnAmCYOUeLqEAfpdypvzmdfhwge6hDP6HSEQ2xNdYhXaQ7xmt5Q5TyH8FvpEBfJvtohig44hM9hh1h--4rLVsrac9Ull1ZTAb3fpcrFSple1S459GzeLZd2H91y2eDf1LCFxupNDefLnQ3fUkCFs-E43aWH1DhzhME1a4RBPB1pcFofbci8H2OYFTPKkE1F_rGG_XSMSmlxcqxhOX1XF2u4Qtn74w0L6TJdoVt0l7xL4g2dqMnORIOBalWb4QHJoXbDcHKaYDe4kPMGu8GV-rg7DCH0w3CHoYY6T3EYutHbNQ7Dt8cdhkoyPHcYmtPURochg24HjjbUUbO1ow3utHD_aMMyck5rjcanXREgB2HWuyDMpW16CNy_G4TWFHg1DA03wuD7SxhMT8IQ9EcY2jkbccLFiFI6S19RGZXTYQ8jknyMqAg1on2YEQE0cKQRd6gy0oj8GCPMiUYYxjE224hTK414k2dEfT4VGNHxnBHe143IqDZicK0R0X8YMbrRiFSKczNBa2lCMvVua0Lr9ia0p3AvExL8TNhPG_0pwIQt9GeQCW1DTVgSYcKHi0y4vcwEz1wT7HkmNN1uwrhdJqzbY8Izyisx4a_PTbB-yRoUfMmEc5V0xQSfGhNU6nnThOe1JkQ9MGHpbyYso5CnJtx3NSO6hRnBnmbE_MuMOBpLOcPMaKTMD8xIizRDjTVjkd2Mg8lmSClmhKSaMYBMpFA0JdC4KWZ8ud-MO4f4-6NmDKduFWas-sYM50Yz5r8yYzFtpyOvzWig9DdmFL81o4RaOUu46ybBx1eCH4X3lhBBH9LCMAkjTBICzRL6Uj51kyTMtkrwHC4hdISE0_QmVkKTOAlPJ0v4k45Ok_BlOuMzJFydKyF3qYRxyyWMpzSaRPNpAb23SUL1XgmHDzCOPqcyOn9QwpJTEtxPS2hDz85IaCTfbyV0Jb8qCd0pqkZC4R0JJx9ICHom4d9NLDhGu1wsKCZLZwsiu1twKtCCM5TR14L1tImy-1uwkJoPtMCDCujMEAtmDrVgDtUrFrxULXhDc8ZaMJcOpFpwhLpMsiA3wwL_xRb0oNFFFqRQ5wMWNBy2IO-sBWkXLZhMK7-1ILWatW9aEFRrQQgdvGdBdZ0FNx9YoP9kwfv1FoTS3ucWlFCHVxb0d7JiEJ1wseJOWyskXytUGuxvxdieVkykJZIVy-m81YqDshXX6TW9p1kxm2p0K5wnWQHaONOKTbSZtlHgLJ4vteKvrfymwIqsfVZU0CVacYz5jlux8JQVxVRCxnNWbKm0opBMd6yYes-KGXTnoRWN9VZ0f2RFwN9WjKSvvWWUUQVNDpCR1k-G1wAZNppEvQfJuDdYxkNqNlTGpyNk7KSJ0TKm0qZEGdso2iYjjsbSlmTG0OKxzDtRxu-zZQyZI8N3voyu_7OQMUtlFJBlmQwrTV8hI5NSV8nwz5cRvl2Gd5GMH_fyvVTGOxp_QcbwizL6fC0jgcIvyVhD2y_LCKmU-X8t49EPMhqvs59qGaMo5RbnuyfD574MP_qEXtTLuP6LjCNPZXxBAxpkhP0jo5eTgsH0kbOCxbSlmYLt1NVDwVJaQbs9FbzsqOAN2XwVJFO9n4JfqIEudVXQ2p9xdKingmN0g3wDFHSmLuRPtn4KJtC5_grKqIK-p9MDFJTTJRo-UME4mkgThirYZVSwn1JkBbXhCu7T0Q8ULIhgf-Q3gj1GKVgdq2AdBScq6GRXEEg_juZZsoJhkxRk0wI6NIX9UdepzJ-uYCplUkqGguiZClKzFLRdoKAD6YsU9MhRUJqroGOegqHrFZho-XbmpUOfKkgr4DlVU9UuBTV0rZjvNOP_FGTREgrar2BTiYJPqMVRBS1p0HEFd75Q4HZeQeEFBbfKFeRXsNY33Bs5VSnwpGvVCv59Q0Ed7ajhTu5y7_Q3vSP_WgVFVEJ77nF_dZz_voKMh5y9XoGRwulDiqZCqv6ZvdJ_nioY9f8KPH7n3JT7WsFKGvYPZ6W1VP9OwSP6le41VfGAzrVWYWijohlZ26tY5a0ijzZTl44qkn1UvNdZRSq16aZiby9-21eFOzUL5pPs_VR8PIDPwSp-CFNxg_4wqvA1qTiqqLhA3TUVAeQYrmIGZVBSuIphESoe21X8RlHJKj6l7DEq0lJVTKap9HCcCjGZ9eibKSoqyX2qCtM0FSOmq-iapWLoXBU5VE7f0WWqpYZ5Kl7Srfkqbi5U8Y58c1Rso7G5nHOlivFrVEygv2nsdr5Tx0IVLXeoKNrJmSl_D2ekzbTvMxWr96pYR8ElKgYeYF9HWJPcjjI_dSWJzh7j_HSRQo5zD1-osJVyD3SMFp1T0fcCc5PrRRUvvlbhXKYCFSr0ShWLaTmVX1NRT4-poVrFK0KNitBb7KlORQE1e6DC5SfeJ4FcqRm5UXNqQS3JnTyoFbWmS7-quEIf_aaikHbSbnpEfs-4-wbmo7nU6h8V7WgQDaOrdJ1mvVOhumkYTpNbamjnrsGbUmkC9ffQsLiNhhzKpRW0hvLoWFsNjz01CG8NruRDXcifrD4aNDpHBZ007KKLfhpiumpIoCndNGQEamjsr-EdNQllbfKiTtSZgslEEiVTKvUYqCGQvIawHvlSGCWF8ZyqzBpqqI5CLRqGkEYRtIrWUbbOJ-XT5HANH0ZoKIrU8DaGfYzS4EwvHBrOjtHwF52YruEkrZjJ2SmP6ukX-o2uZnGOWdzVbA1mukbFczW0yuZMdJDOUEiuhliKp6XUeqWG86s1lFPMWg0ueRpGr-N5vgYbjfpYw6JCDat3aCijD3ZqyCpi_zSPPqL5tIAW0iJaTEtoKS2jHFpOubSCVtIqWk1raC3l0TpaTxtoI-XTx7SJNtMW2krb6BPaTp9SARXSDtpJu2g37aHPqIiKaS_tI_e93DM57eOeyYUiDnJuGkMnD2s4TU2O8JxcyJPu08809Bj_Pj_nvVPqCc5Aa-lPKj3N-c9wZko5qyGNtldoiLyk4RCNqdYwjqJruGOq-pH3-Ij9PmZ_FPxEw4EXGn4iv5fcI62gtbSB3F_xrt5q-I7av-NOmuiIaKpDctahUIGLjp2UbtBxFDpkVx06xVA8ldFtNx2BzXWMa6ljAv1N7-ikh46zFNxKR3-KoG5tdPSiZbSKTrXX8RW5eeq4SwYvHU9I8WZd2k1V__vZR0f3Tjp60hPq7avjGK3urCOPtlIHPx0-1M9fh5GKAnQU0z76qpcOj746WlEbqqQblBbC7_rpiOuvQ4Tq-Ix8Bujwpd4D2Tu1G6TDi3oN1dGHOpoZR5NpGg3RdcwI15EfoWMLHaCRI7kvuk6jInXEUjz9GqPj-1E6mscyD3WI17EhQcdjSk9kHsqg2TSHpiaxBk2ndMqgTHIdraMtDRnDvafomEjbUnUUUulsHWfm6Hgwl3lp33wdz6hqAfe5hO90gB7RrxSQw7mW6_hpDe9uLe-OhmzgHW_iDrbpGEvjaHoh61MW_bVbxwvqVsw5T-qoO6PjNWnndERROgVd1GGj9ZRPPmU6npfreEVNKnSUX9IReZ13X6PD-zZjaTg9v6Oj5K6Ow_QFfUm4r6MFnXmo4zx9Xs_9PNExl-ZR6WsdSRuTEdaQjASf5wPbuLkefLL5pqHVylovf_-U9IzktEnTJ85K6TNr0szxmbPHZyaHBIcMeJ-Cggcmzwj-L38PHlA" |
| content-encoding | gzip |
| server | ESF |
| x-xss-protection | 0 |
| x-frame-options | SAMEORIGIN |
| x-content-type-options | nosniff |
| set-cookie | __Secure-ENID=CoICCAIStAEBY3DFeuu4ad8XjcDB0A-mQoLG6nM53WOlWF1XcRueyH0alAB7wy6oGMW5mQ1P3XiOQJV8YU1EuccXq_ajEYUSQQhIBwhjNK-LcMzXbBg8xawh-MZRhDSYZiIuCFJJCsoh6Q6_qwPFpaD6hE0SxBy32FvynJnlE3dtgVnzazwT9kPAdFXin5fhZAbFJQzcda-uh1aUdRb8Gb5x2mHCeLVHW6GICzjsTi4vWRNNT9ixmCkSLBsoAjJFAfsI_Go0-GtVn2uoi-8DXvz-j_FpX0QQEoorfu4QxpOZIqmb4Jeun2YvUChAtZOmpdexFRmapK921QGKPNYOu_i1x6QB; expires=Tue, 30-Nov-2027 21:17:41 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax |
| alt-svc | h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 |
Tech stack
HTTP/3 (QUIC)
How to use HTTP headers
-
1
Paste your input
Enter the value at the top — domain, IP, URL, email, ASN, hash, whatever fits this tool. The smart input auto-detects type.
-
2
Click "Inspect"
host.tools issues real probes (DNS, HTTP, TCP, TLS, WHOIS where applicable) and renders the result in milliseconds.
-
3
Open the API tab
Every web tool has a sibling /api/v1/http/headers JSON endpoint with the same payload. One copy-as-curl click and you're scripting it.
Why this matters
Headers are how the modern web declares its security posture. Auditing them is the highest-ROI thing you can do this week.
API equivalent
/api/v1/http/headers?q=https%3A%2F%2Fwww.google.com%2Ffinance%2Fsitemap.xml
curl -s '/api/v1/http/headers?q=https%3A%2F%2Fwww.google.com%2Ffinance%2Fsitemap.xml'
Embed this tool
<iframe src="/http/headers?q={INPUT}&embed=1"
width="100%" height="600" frameborder="0"></iframe>
Drop into any HTML page. The embed=1 flag hides nav and footer.
FAQ · HTTP headers
Common questions
Is HTTP headers free?
Yes — every tool is free on the web with a 200/hour rate limit per IP. The matching API endpoint /api/v1/http/headers is free up to 100 requests/hour, no key required.
Where does the data come from?
Real-time probes against authoritative sources (DNS root, RIRs, registries, the target server itself), plus partner data feeds from hostinfo.com (GeoIP/ASN) and hostcheck.com (reputation).
How fresh are the results?
Live by default. Cached for 5 minutes to make repeat queries instant; pass
?nocache=1 for a forced refresh.Can I run this from the command line?
Yes — every tool ships with a copy-as-curl. There's also an official CLI:
host.tools http headers YOUR_INPUT.Can I monitor results over time?
Pro tier lets you schedule any tool to run every 1/5/15/60 min and alert on diff. See monitors.
host.tools Pro
Run HTTP headers on a schedule. Get pinged when it changes.
Pro gets you bulk lookups, monitors, webhook alerts, history, exports and 10,000 API calls/day. $19/mo.
- ✓Schedule any tool — every 1, 5, 15, 60 min
- ✓Diff against last run, alert on change
- ✓Webhook + email + Slack + PagerDuty + OpsGenie
- ✓Bulk CSV upload, 1,000 inputs per job
- ✓Export results as CSV / NDJSON / Excel
- ✓90-day history, comparison view