HTTP Header Checker
See every response header, the full redirect chain, and where the time goes.
Enter a URL to see exactly what the server sends back: every response header, each hop in the redirect chain, and a timing breakdown showing where the milliseconds actually go — DNS, connection, TLS handshake and time to first byte.
Requests are made from our server, so you see the response a fresh visitor gets rather than one shaped by your browser cache, extensions or cookies.
How it works
Every HTTP response carries headers describing how it should be handled. Most are invisible in normal browsing, yet they control caching, security, compression and content negotiation — and when a site misbehaves, the answer is usually sitting in one of them.
The headers worth checking first:
cache-controlandetag— whether responses are cacheable, and for how long. A missingcache-controlon static assets is one of the most common and easily fixed performance problems.content-encoding— should begziporbrfor text. Its absence means you are shipping uncompressed HTML, CSS and JavaScript.strict-transport-security— tells browsers to use HTTPS for this domain in future, closing the window where a first plain-HTTP request can be intercepted.serverandx-powered-by— often disclose exact software versions. Neither is required, and removing them denies attackers a free inventory of what you run.
The redirect chain matters more than it looks. Each hop is a
full round trip — DNS, TCP, TLS, request, response — so a chain of three redirects
can add several hundred milliseconds before the real page starts loading. The
classic accidental chain is
http://example.com → https://example.com →
https://www.example.com, which costs two round trips where one
would do.
The timing breakdown separates the phases so you can tell where a slow response actually originates. High DNS time points at your DNS provider; high connect or TLS time points at network distance or handshake configuration; high time-to-first-byte with everything else fast points squarely at server-side processing.
Frequently asked questions
Why do the headers differ from what I see in my browser?
Your browser sends cookies, cached validators and its own Accept headers, and servers vary responses accordingly. This request comes from our server with no cookies and no cache, so it shows what a first-time visitor receives.
What is a good time to first byte?
Under 200ms is good, under 500ms acceptable, above 800ms worth investigating. Compare it against the connect and TLS figures — if those are small and TTFB is large, the delay is server-side processing rather than the network.
Are redirects bad for SEO?
A single 301 is fine and passes ranking signals. Chains are the problem: each hop adds latency, and search engines limit how many they will follow. Point redirects straight at the final destination rather than through intermediate hops.
What is the difference between 301 and 302?
301 is permanent — browsers and search engines cache it and transfer ranking signals to the new URL. 302 is temporary and keeps the original indexed. Using 302 for a permanent move is a common and quietly costly mistake.
Should I remove the Server header?
It is not required, and exposing exact versions gives attackers a shortcut to matching known vulnerabilities. Removing it is not security on its own, but it is free and removes an easy reconnaissance step.
Why does the tool show a certificate error but my browser does not?
Browsers often fetch missing intermediate certificates automatically. This tool reports what the server actually sends, which is what stricter clients — mobile apps, API consumers, payment callbacks — will see.
Related tools
Redirect Checker
Trace every hop a URL redirects through, with status codes and timings.
Network & IPSecurity Headers Checker
Grade any site's HTTP security headers and see exactly what to add.
SecurityWebsite Speed Test
Break a page's response time into DNS, connect, TLS and TTFB.
Website & SEOSSL Certificate Checker
Check any site's certificate: expiry, issuer, hostname coverage and chain.
SSL & TLSGzip Compression Tester
Check if a website has Gzip or Brotli compression enabled.
Developer UtilitiesASN Lookup & Prefix List
Lookup Autonomous System Numbers (ASN), IP prefixes, and network ownership details.
Network & IPNeed hosting that just works?
Free SSL, daily backups and 24×7 support on every Loudhost plan.