HTTP Headers Analysis for https://m.vk.com

Detected Technologies from Headers

See all in URL Inspect 19

AMP

Facebook

Google Analytics

Google API JS Client

Google DoubleClick

Google Maps

Google Search

Google Static File Front End

Google Tag Manager

Google Translate

Instagram

PHP Telegram

TikTok Analytics

Twitter Yandex

Yandex Tools

YouTube

Google Cloud

HTTP Security Headers

Status

Strict-Transport-Security

Present

max-age=15768000

Content-Security-Policy

Basic

default-src; script-src; style-src; +1 more Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Good

sameorigin

X-Content-Type-Options

Missing

Not configured

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Increase HSTS max-age to at least 1 year and add includeSubDomains
• Improve CSP by adding more specific directives and removing 'unsafe-inline'
• Add X-Content-Type-Options: nosniff
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close

connection: close

Caching Headers

Cache-Control

Caching

no-store

cache-control: no-store

Content Headers

Content-Length

Content

122387

Content-Type

Content

text/html; charset=utf-8

content-length: 122387
content-type: text/html; charset=utf-8

Server Headers

Server

kittenx

X-Powered-By

Server

KPHP/7.4.125998

server: kittenx
x-powered-by: KPHP/7.4.125998

CORS Headers

Access-Control-Expose-Headers

Cors

X-Frontend

access-control-expose-headers: X-Frontend

Cookies Headers

Set-Cookie

Cookies

set-cookie: remixir=DELETED; expires=Thu, 01 Jan 1970 00:00:01 GMT; path=/; domain=.vk.com; secure; HttpOnly
remixlang=3; expires=Sun, 21 Feb 2027 21:39:24 GMT; path=/; domain=.vk.com
remixstlid=9096374722062148695_hLeuwCON78AfwPp5GZIbP13iM21OAFpj5mZpxu1sNo0; expires=Fri, 26 Feb 2027 06:46:33 GMT; path=/; domain=.vk.com; secure
prcl=da78a2a8d24075; expires=Fri, 27 Feb 2026 05:46:33 GMT; path=/; domain=.vk.com; secure; HttpOnly
remixir=DELETED; expires=Thu, 01 Jan 1970 00:00:01 GMT; path=/; domain=.vk.com; secure; HttpOnly
remixQUIC=DELETED; expires=Thu, 01 Jan 1970 00:00:01 GMT; path=/; domain=.vk.com; secure
remixff=0; expires=Sun, 08 Mar 2026 06:46:33 GMT; path=/; domain=.vk.com; secure
remixua=-1%7C-1%7C-1%7C1980567665; expires=Sat, 27 Feb 2027 12:03:49 GMT; path=/; domain=.vk.com; secure

Other Headers

Date

Other

Thu, 26 Feb 2026 06:46:33 GMT

Link

Other

URL https://api.vk.com/

rel=dns-prefetch

URL https://top-fwz1.mail.ru/

rel=dns-prefetch

URL https://r3.mail.ru/

rel=dns-prefetch

URL https://www.tns-counter.ru/

rel=dns-prefetch

Reporting-Endpoints

Other

default="https://m.vk.com/browser_reports?dest=default_reports"

Server-Timing

Other

tid;desc="cUcXs-aqgHysytRAQNBO-kOcCHbC8g",front;dur=82.391

X-Frontend

Other

front923504

X-Trace-Id

Other

cUcXs-aqgHysytRAQNBO-kOcCHbC8g

X-Trace-Id-V2

Other

019c98b2fe1771d5933dae3ed1ed660d

date: Thu, 26 Feb 2026 06:46:33 GMT
link: <https://api.vk.com/>; rel=dns-prefetch, <https://top-fwz1.mail.ru/>; rel=dns-prefetch, <https://r3.mail.ru/>; rel=dns-prefetch, <https://www.tns-counter.ru/>; rel=dns-prefetch, <https://stats.vk-portal.net/>; rel=dns-prefetch, <https://st.vk.com/>; rel=dns-prefetch
reporting-endpoints: default="https://m.vk.com/browser_reports?dest=default_reports"
server-timing: tid;desc="cUcXs-aqgHysytRAQNBO-kOcCHbC8g",front;dur=82.391
x-frontend: front923504
x-trace-id: cUcXs-aqgHysytRAQNBO-kOcCHbC8g
x-trace-id-v2: 019c98b2fe1771d5933dae3ed1ed660d

Recommendations

Enable compression (gzip/brotli) to improve performance

Consider removing X-Powered-By header to hide server technology