Check HTTP headers & redirects

Where does an address really lead? We request it, follow up to five redirects and show the response headers at every step – without loading the page content.

20 of 20 checks left today

Understanding redirects

Status code 301 means a permanent redirect, 302 and 307 a temporary one, and 308 is the permanent version of 307. The difference matters for search engines: only permanent redirects reliably pass rankings to the new address. Ideally there is a single redirect straight to the final HTTPS address; long chains cost loading time.

Security headers

A few lines of server configuration make many attacks harder: HSTS forces browsers to use HTTPS, a content security policy limits where scripts may be loaded from, and X-Frame-Options prevents other sites from invisibly embedding your page. We show which of these headers are set and which are missing.

Frequently asked questions

Which addresses can I check?

Publicly reachable websites over http and https on the standard ports 80 and 443. For security reasons we do not test internal addresses or other ports.

Why is the page content missing?

We deliberately read only the headers. This keeps the check fast and prevents the tool from being used as a detour for fetching other people’s content.

Domains and DNS in good hands

1blu business GmbH looks after domains, DNS and mail servers for companies, agencies and resellers – with dedicated contacts instead of a call centre.