HTTP header checker

Paste a public URL to see status, content-type, and headers the proxy received. After consent, the request goes through AllOrigins (or a similar proxy), so the origin sees the proxy, not a clean Googlebot UA from FlashKit.

Use it to confirm a 301, a missing HSTS header, or a surprising content-type. It is not a full security scanner.

How to Use

  1. Enter the exact public URL (watch http vs https and trailing slashes).
  2. Accept the proxy disclosure.
  3. Run the check and note status, location, cache-control, and content-type.
  4. Fix redirects and security headers on your host, then re-check.

Key Features

  • Status and header dump
  • Optional method / UA fields (proxied)
  • No FlashKit login
  • Disclosure before the fetch

Frequently Asked Questions

Is this the same as curl from my laptop?

No. A proxy sits in the middle. Some sites block proxies or return different headers than they would to you.

Can I send custom auth headers?

Do not put secrets into a public proxy. Use curl locally for authenticated endpoints.

Related Tools