host.tools

HTTP headers

HTTP /api/v1/http/headers

Capture every response header, follow redirects, time each hop.

Try: https://host.com https://checkhost.com https://hostinfo.com https://crypt.tools
Related: HTTP headers Security headers grader Redirect chain tracer SSL certificate inspector robots.txt parser sitemap.xml inspector
https://www.google.com/finance/beta?ucbcb=1 200 4 hops 791 ms
Redirect chain
  1. 302 https://www.google.com/finance/sitemap.xml 56 ms
  2. 303 https://consent.google.com/m?continue=https://www.google.com/finance/sitemap.xml&gl=NL&m=0&pc=fgc&cm=2&hl=en-US&src=1 31 ms
  3. 302 https://www.google.com/finance/sitemap.xml?ucbcb=1 41 ms
  4. 200 https://www.google.com/finance/beta?ucbcb=1 367 ms
Final response headers (21)
content-type text/html; charset=utf-8
vary Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
x-ua-compatible IE=edge
cache-control no-cache, no-store, max-age=0, must-revalidate
pragma no-cache
expires Mon, 01 Jan 1990 00:00:00 GMT
date Wed, 16 Sep 2026 01:33:21 GMT
p3p CP="This is not a P3P policy! See g.co/p3phelp for more info."
content-security-policy script-src 'report-sample' 'nonce-k0R0WVy8F_Ls1yJAWnWgww' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /finance/beta/_/FinHubUi/cspreport;worker-src 'self', require-trusted-types-for 'script';report-uri /finance/beta/_/FinHubUi/cspreport
permissions-policy ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
accept-ch Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
cross-origin-resource-policy same-site
cross-origin-opener-policy same-origin
reporting-endpoints default="/finance/beta/_/FinHubUi/web-reports?context=eJwN1Hl4TecWBnCSlfNquNRMXEJMaUREam5y9tnDtxGUyHgmEVO5V5EEFWIsWhSlpprqatCQ21QpqlqzhhhjqCFIam6piqGl3N73j9_z7PPs9a31fvvb-wRfDI1oGFgpmiKCQyr1Cg-ptKBzq0rH77kqta_RV24H9ZOs3H4y834_SV-YIKmnEiTiVYJMmN9farZOlD8jEiWnT6KUTEmUG1MTpbA4USJPJ0qNF4lyuHaSjJyeJOcaJktFq2S51zxFQvQUeTA8RZJGp0jNrBR5PDlFWuxMkdzbKbLmfynyS0SqJMSnStORqeKdmiovZqVK-YJUibyZKp0apElEwzSZ1zpNphhpUtI9Tb4dkyZjFqfJJ3lp0mBDmtzemCb6oTQJLkmTHgFuWVvNLftoRC23xNRzS1SkWxZ0dMvHdL2rW7a63NJ1qFuqZbrl7CK3vFrnlkH5bhlC79CfW9zy7h631NvrlkvX3JIZ5pG2_T3S1OsR-z2PpNLaqR4pm-eRmcs8Muq4R9ylHokt90jdZx6JCvTKAEp_wyuHY7wyp5tXlsZ6ZZPySkfbK9_38sohn1fmD_PKDtr8rlf2j_bKEZqb7ZWPKHSsV-rM8UryR14JXOgV7w9eeXDEK5-e8ErDdj65-KZPuvT2STeKpX5en5jpPtmY45NRE32yfpZPxn_gk5NLffJ8jU8GbvBJjXyf1KP61ICq7fBJdapN7oM--avYJ68o4LhP_nPeJ4UXfXLmsk9ulfqk1jWfHC33yc47PqnyiGsq-6Wn-GVzFb8U0EM6XNUvA5vzup1fHsX4Jfotv1TQd739st3jl-WD_fJ8mF9e0Es6MdEvoR_65QD55vrlrzV-ydvil0aFfpl16WTQchq7_lTQbJpLq6l905Igk7IanAuaSRUTLwbVmXQx6OOwAMcyyugR4Cg6HOgIPxLoSKcsepbdx1FlbB9H-cK-jlskD_o6vi1KcHxPlRb2d4wpS3Rk0bjEJEcO6beSHDYF3E9y5IUlO_Lpa9pJ09KTHbPo6LVkx0kKSk91BNOMoamOWRQ9N9Wx-6NUR05-qmMKFdNJukhX6BbdpQp6Sn9TwOZURzWqQR-XuB1Lacxdt2McldpeRzndWz3c8RsFDquJLnXbIo5adIpCuBWFcX9HYQIt7hGD5RRxKg5Pzseh8d04aL_GIer3ONQJdGJHkBM76Xv6gQ7RYSqm41RYwwlPIyeOdHSibpwT4dS5rxMn-jmxONEJl9sJxxAnCiY48RPt_tCJbh85oVECvZzvROVFTtxcTKtZt8mJS9udCNnrxMMiJz4_6kTDs05knnOiaynvlznx-I4T_X93YsAzJwZTSrCG7v_QkE6RtTXUrKuhLsU30JAWqiGfajXVsCiMwjUso0dRGmp31DC9t4ZJ2Rp-maTh7akaLr2vod5sDb75Gp6s0BCwUsOQdRoWrNdQQW9u1DB_s4aCQg3ztmpYTo-3aZjyjQZzF3NQ9DENe0_QSQ3bzmhodEGDTa1_0vC0VENCuYYZv2h4n2IeaKj8UIOXlr7U0L-aC9H1XEhs6UIKZdDMWBee0cBeLgyhLBrWzwU72YWpPhdODXChIN0FfZALMYNd6EQaKepPaTTk3y78m25OcGHnRBcezXOhbJMLu_JduPxf1m51oSfd2eXC3n0uND_iwpwfXbhbwlnlLqy-40L3-y4UUeAzF3KfuzCNVtJXL1x4QqNfurDhlQub6fVAHVeCdbzVQEe9xjpCaHZrHVYbHT0pPlJHb3qbRsfoGENLuumYEqejj6YjwqWjHS2m5rqO8Sb79NTRsY-O7-hlso7KKTr6-XQk0cQMHVvfZd9ROnaNZp9MHacm6Hiaw7qJOtrncv4MHUNm6RhKw2gE5dJkarNEx7mNOgq3sA9to0O0r0BHs0Idr2_XMW23jurf6ahFFXt0PKPGRbxPj0_p2HFGR2iJjhaUcEHHmss6vi3X0bZCx6ePdXxZ2cDXlBpkwEvraAPdDTHwbmMDRhMD_VoY2B1hYA9ltjOwkJZQTgcDU6hqZwM1aDXt6WbgpjIw0zbwJ72kgckGhtK1FANl9F6GgQm0ZbCBr-j6cANNRxiYnWmg41gDnck73kDYNAOtKP1jA022GHhSaODznQa-oGEHDPyLfqC9dJA-LDKw9LSBOiUG9lPyOQODKfMnA7WuGKhNdSmq1EAMFVw1cO6agZ_KDfT42cB4mkDtbzIHyWMDG58a2Ez1nxvoUMlEF9oRZGKyw8Tl2ibM-ibOkt7YhE1dw0z0bmkio7WJ4XT1DRMhnUyc6WriPE3XTcyiDaaJfeS2TIyjAnpB39sm2nQ3MZ4u9DAxM97EbJpLLzwmxGsidpAJjQJHmAAtyjaxhJbSCooYZ2J-DtfPMLHufRN5NH0F59KFlSbKyLHexNM8E9mbTByhYxT_BXNsN5G724Rzr4llJ0ysoYf04LSJwrMmtpF22cTIqybG0KifTSTdNxH-l4m-1LuOhSQaQK_oYEMLh-gI5TSz0KCThREU2cXC1a4WblCDbhZaxVpoQz-bFm7SC_q1u4VVfSx8RsfetnCGMpMsLHFbWEErPRb6ey2kUAYtS2dPmpZhwTfCwtvjLASMtwB6jR5St_csFFOzKewxw8JqMt63YFLP2RZGfWAhizLmWBg4z8I3CyyELbZw7xMLIXkWrm_k750W_kUjyf7WwtD93M9BC2lkHrFQ-KOFeceYr5j7Pm7xP9fCrTMWnp1l3nN8PlR82UKXUgux5LnK_VGjMguhlFluIZvu0R83meOOhdP3LJyj-vctfPWAueg63aBjFRY6PbHQnfo8tdDuDwtx_7PwRiWFNtSVJgUqTKNlrymspJRqCh5aVV3hNjWrobCb_gxReEnqnwrxtJ9O0M1QhbtUQUebKdQMU_iQVtKkFgq5NIUK6L9USA_oN_qdqrdUqEE16Ukr1rRW-Jr6hiscI3-EwkAqilRo2V4hnLxvKrxDhzuxhnZ1YUbyv6UwJk5hnVMhn-4ZChmWQmm8QhmN76UwubfCDPogQeE1t8J8j8Ii-oTyqIlPIYquD1BIyFBIppwRXEeFtJW20SEKG6kwKFPBma3QiwaPVfguV-EHqj1ZoT7FT1XYMk2hz3SF2JkKO2cr7KHQDxQC5iuEUPEChTP01kIFja4s4dzlCrNWMietXMXnQsNWcz1NXqtQsk7hAo36j8JoyqRVtJrWUhEdpWKqul6hGlWnMGpOLWkoDaPhtJg-oaWUT5upgO7TA3pIgZ8rCDkomtrTm5RNY2k8HacTdIpa5im0onCKpTjSaAsV0Jd0gA7SYWq0QeGf1ITafsFzoGgaQ2NpyWaFT2l3ATN9xT1tVfgHhW5XeEVF3_B9oDX7ue8DClkHFbof4tnQxcMKl2j2EYXgH5nxpMJpKqFap5iNNEqkFEqjFbSK1tD6MzyvszxTakhfnlf4ka5RnSusLeV7cJV11Pi6QkQZZ93gt0DaTQWTutMyir6j0IHO0QVK-o3P9iH70Z1HnP2Xgo-G0JO_-e1RbKCNoCo2qlAwxdM4eo_WvmbjKBVTGf1Bz6l5sI1uFEvv0GJaQvm0jw7Qr_Qb_U7RVW14yU_ZtJbW0d6aNi7WtlG5rg2Tlja00TTExkz6vLGNNk1s3Ai1kdvMxmSaStda2fiZblNypI289jY6dLBR2tFGy1gbB502HtEcy0ateBuRlJ9k4w0PDbCxKt3GqyFc846NjtSZ0ho97VyrapXyG5vOO14vKvgsJyxs0OjM9GEjRg0fN6jtuBHZQ7PGD81Kj4mO6RTdtX2HqPbR6WOi_w9Twibx"
content-encoding gzip
server ESF
x-xss-protection 0
x-frame-options SAMEORIGIN
x-content-type-options nosniff
set-cookie __Secure-ENID=CokCCAISuwEBAQxeRb4ixw7q7CApKZ06j6MfBLyNi3Y0Ve8qGye3i3_EF0E4XERmYdIJL7mPqJH5lal9DVByyh3kbykLpjf4UJS4cHC6xhFhs98qeTEhC3VKRGpKGyZjeg2HHltHcn1Bm7TELn3tT1dABWtnTDpjEEpcGrJXV1LQuSw0M0OpKUF8yslDWRvMSUgugG3gaoRTLuhqxSTANXVSKmARtckyidwKAHZSzpbI3zGEbq03qHCzy3bv4bjuAzRLKAIyRQF9bMSqG9c1no6BJMkIG1Huk-I99ixU5lUDs8Je5dFQyFrX-fElFz1tCMw0TZFIBR25zQEXUNLGK6YE0SLrdTb7_EnCBQ; expires=Sat, 16-Oct-2027 17:51:39 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
alt-svc h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
Tech stack
Google AnalyticsHTTP/3 (QUIC)
Sponsored host.tools Pro
Bulk lookups · monitors · webhooks · 10,000 API calls/day

Upgrade to Pro for $19/mo. Cancel anytime. Works with the same API you already use.
How to use HTTP headers
  1. 1
    Paste your input

    Enter the value at the top — domain, IP, URL, email, ASN, hash, whatever fits this tool. The smart input auto-detects type.

  2. 2
    Click "Inspect"

    host.tools issues real probes (DNS, HTTP, TCP, TLS, WHOIS where applicable) and renders the result in milliseconds.

  3. 3
    Open the API tab

    Every web tool has a sibling /api/v1/http/headers JSON endpoint with the same payload. One copy-as-curl click and you're scripting it.

Why this matters

Headers are how the modern web declares its security posture. Auditing them is the highest-ROI thing you can do this week.

API equivalent
/api/v1/http/headers?q=https%3A%2F%2Fwww.google.com%2Ffinance%2Fsitemap.xml 
curl -s '/api/v1/http/headers?q=https%3A%2F%2Fwww.google.com%2Ffinance%2Fsitemap.xml'
Embed this tool
<iframe src="/http/headers?q={INPUT}&embed=1"
  width="100%" height="600" frameborder="0"></iframe>

Drop into any HTML page. The embed=1 flag hides nav and footer.

FAQ · HTTP headers

Common questions

Is HTTP headers free?
Yes — every tool is free on the web with a 200/hour rate limit per IP. The matching API endpoint /api/v1/http/headers is free up to 100 requests/hour, no key required.
Where does the data come from?
Real-time probes against authoritative sources (DNS root, RIRs, registries, the target server itself), plus partner data feeds from hostinfo.com (GeoIP/ASN) and hostcheck.com (reputation).
How fresh are the results?
Live by default. Cached for 5 minutes to make repeat queries instant; pass ?nocache=1 for a forced refresh.
Can I run this from the command line?
Yes — every tool ships with a copy-as-curl. There's also an official CLI: host.tools http headers YOUR_INPUT.
Can I monitor results over time?
Pro tier lets you schedule any tool to run every 1/5/15/60 min and alert on diff. See monitors.
host.tools Pro

Run HTTP headers on a schedule. Get pinged when it changes.

Pro gets you bulk lookups, monitors, webhook alerts, history, exports and 10,000 API calls/day. $19/mo.

See pricing Tour monitors
  • ✓Schedule any tool — every 1, 5, 15, 60 min
  • ✓Diff against last run, alert on change
  • ✓Webhook + email + Slack + PagerDuty + OpsGenie
  • ✓Bulk CSV upload, 1,000 inputs per job
  • ✓Export results as CSV / NDJSON / Excel
  • ✓90-day history, comparison view