Web server detector: see what any site runs

Enter the URL and the detector analyses response headers, header order and behavioural signals to identify the server — Apache, Nginx, LiteSpeed and others. Results include a confidence rating, and CDN masking is flagged rather than guessed through.

Hiding or changing the Server header is security through obscurity — it stops casual fingerprinting but won't slow a determined attacker, who has other signals to work with. It's harmless to do, but real security comes from patching, minimal headers and hardened configuration, not secrecy alone.

Apache and Nginx send distinct header combinations, error pages and connection behaviours. The detector compares these fingerprints against known patterns for each. Many sites run both — for example Nginx as a reverse proxy in front of Apache — and the report reflects that.

CDNs like Cloudflare terminate the connection themselves, so their headers replace the origin server's. The tool detects this masking and says so honestly with a confidence rating, rather than inventing an origin it can't actually see.

Low confidence means the signals were weak, mixed or masked — the guess is a best effort, not a fact. High means multiple independent signals agree. Treat Low results as a starting point and verify with other reconnaissance before drawing conclusions.

Yes — server banners and behaviour often leak the OS family, such as Linux versus Windows. OS guesses are confidence-rated High, Medium or Low, and CDN-masked sites report what the edge network reveals rather than the hidden origin.