WhosBuilt
HTTP headers checker

Check HTTP response headers for a website

Paste a domain to inspect visible server, powered-by, security, caching, CDN, and generator header signals.

Try:

What this checks

  • Server and powered-by headers when exposed
  • Detected CDN, platform, cache, and security headers
  • Stack context so raw headers are easier to interpret

How I treat the evidence

Headers are public, but they are often partial. Many sites remove server names or put a CDN in front.

That is why the result pairs headers with DNS, SSL, hosting, and technology fingerprints.

Why do server headers sometimes look generic?

A CDN or reverse proxy may answer before the origin server. The header is still useful, but it may describe the edge, not the app.

Is this a security scanner?

No. It reports visible headers and context. It is not a vulnerability scan.

Related tools