Identify and inspect files from their first bytes: magic numbers, PNG, JPEG, GIF, WebP, ZIP, gzip and PDF headers.
payments ON MAINNET (real money) · 9 live endpoints
| Endpoint | Price | What it answers |
|---|---|---|
GET /extension-vs-content | $0.02 | Compare a file name's extension with its real type from the first bytes; flags executables disguised as documents or images. |
GET /gif-header | $0.02 | Read a GIF's version, width, height and global colour table size from its first 13 bytes. |
GET /gzip-header | $0.02 | Parse a gzip header: method, flags, modification time, original file name, OS and compression hint. |
GET /jpeg-info | $0.02 | Read a JPEG's width, height, components and baseline/progressive mode by walking its markers; flags JFIF and Exif. |
GET /magic-bytes | $0.02 | Identify a file type from the first bytes (hex): PNG, JPEG, PDF, ZIP, ELF, EXE, MP4, SQLite and 40+ more signatures. |
GET /pdf-header | $0.02 | Read a PDF's version and header position from its first bytes; flags junk before %PDF- and an invalid version. |
GET /png-header | $0.02 | Read a PNG's width, height, bit depth, colour type and interlace from its first 33 bytes, and verify the IHDR CRC. |
GET /webp-info | $0.02 | Read a WebP's width, height, lossy/lossless/extended format, alpha and animation flags from its first 30 bytes. |
GET /zip-entry | $0.02 | Parse a ZIP's first entry header: name, method, sizes, CRC, encryption, and zip-slip path or executable-name risks. |
GET /catalog returns this list as JSON. Activity hub · uptime.
Header inspection computed locally from hex bytes the caller sends, per the published format specifications, provided as is. Only a prefix of the file is examined: a matching header does not prove the rest of the file is valid, clean or safe, and this is not malware detection. Send only the first few hundred bytes, never whole files or private content. Not security advice. Every paid response carries a disclaimer field.