The Three Signals That Reveal Hosting
The Server HTTP header is the first and most basic signal, identifying the web server software handling the request — Nginx, Apache, LiteSpeed, or Microsoft-IIS. This narrows the category but doesn't name the specific hosting company, since many providers run the same underlying server software.
Proprietary headers are the most specific signal when present. Managed WordPress hosts in particular set headers that directly name them — WP Engine sets X-WP-Engine, Kinsta sets X-Kinsta-Cache, and similar patterns exist across other managed providers. These headers exist because the host wants to be identifiable as part of their service offering. The third signal, DNS A-record IP ranges, works by matching a site's hosting IP address against publicly documented IP blocks owned by major cloud providers — AWS, Google Cloud, Azure, and DigitalOcean all have identifiable IP range ownership.
What Hosting Category Typically Indicates
Shared hosting (identified by generic server headers with no managed-host signature, often on budget hosting IP ranges) typically indicates a smaller site, a personal project, or a business in its early stages running on minimal infrastructure budget. Managed hosting (identified by proprietary headers from providers like WP Engine, Kinsta, or Pressable) indicates a deliberate investment in performance and support, usually corresponding to a business that depends on its website for revenue or lead generation.
Direct cloud hosting (AWS, Google Cloud, Azure IP ranges with no managed-host layer) typically indicates either a custom-built application requiring infrastructure flexibility a managed host doesn't offer, or an internal engineering team with the capacity to manage infrastructure directly rather than outsourcing it to a managed provider.