About xhttp.lol
xhttp.lol is the HTTP response debugger. It analyzes CORS policies, CSP directives, security headers, redirect chains, and cache behavior — and tells you exactly what's wrong and how to fix it.
Why?
Because CORS errors are the most frustrating part of web development. Because CSP policies are hard to get right. Because you shouldn't need to memorize which security headers exist and what they do. One command. Real answers. Fix suggestions with actual server configs.
How it works
We send real HTTP requests to your target (including OPTIONS preflight requests) and analyze every response header. There is no JavaScript execution or screenshotting. TLS enrichment runs through our Fly.io-hosted probe, and domain signals may come from Yoke through a private service binding.
Part of the .lol family
yoke.lol — full domain intelligence · certs.lol — TLS/SSL analysis · ns.lol — DNS toolkit · vrfy.lol — email validation