How to use Website Legitimacy Checker
- Paste or load response headers, cURL -i output or a HAR into Website Legitimacy Checker.
- Press Analyze to run it locally in your browser.
- Read the parsed redirect chain and security-header audit that Website Legitimacy Checker lays out for you.
About this tool
There is no server behind Website Legitimacy Checker. Paste the headers, curl -i output or HAR you captured and Website Legitimacy Checker maps the hops and status codes locally.
It also audits the final response for security headers such as HSTS, CSP and X-Content-Type-Options. No data is sent anywhere, so it stays fast and private by default.
Frequently asked questions
What does Website Legitimacy Checker do?
Website Legitimacy Checker lets you check your input right in the browser, with the result shown instantly and nothing uploaded.
Do I need an account for Website Legitimacy Checker?
No — Website Legitimacy Checker needs no account, sign-up or installation.
Does Website Legitimacy Checker upload my data?
No — Website Legitimacy Checker processes everything locally in your browser, so nothing you enter is uploaded or stored.
Why can't Website Legitimacy Checker fetch a live URL itself?
Browsers block cross-origin requests (CORS), so Website Legitimacy Checker analyzes response headers, curl -i output or a HAR you capture and paste — all locally.
Does Website Legitimacy Checker work offline?
Once the page has loaded, Website Legitimacy Checker keeps working with no network connection.