HTTP Headers Analysis for https://vk.design

Detected Technologies from Headers

See all in URL Inspect 19

AMP

Facebook

Google Analytics

Google API JS Client

Google DoubleClick

Google Maps

Google Search

Google Static File Front End

Google Tag Manager

Google Translate

Instagram

PHP Telegram

TikTok Analytics

Twitter Yandex

Yandex Tools

YouTube

Google Cloud

HTTP Security Headers

Status

Strict-Transport-Security

Present

max-age=15768000

Content-Security-Policy

Basic

default-src; script-src; style-src; +1 more Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Good

sameorigin

X-Content-Type-Options

Missing

Not configured

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Increase HSTS max-age to at least 1 year and add includeSubDomains
• Improve CSP by adding more specific directives and removing 'unsafe-inline'
• Add X-Content-Type-Options: nosniff
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close

connection: close

Caching Headers

Cache-Control

Caching

no-store

cache-control: no-store

Content Headers

Content-Length

Content

105727

Content-Type

Content

text/html; charset=utf-8

content-length: 105727
content-type: text/html; charset=utf-8

Server Headers

Server

kittenx

X-Powered-By

Server

KPHP/7.4.125979

server: kittenx
x-powered-by: KPHP/7.4.125979

CORS Headers

Access-Control-Expose-Headers

Cors

X-Frontend

access-control-expose-headers: X-Frontend

Cookies Headers

Set-Cookie

Cookies

set-cookie: remixir=DELETED; expires=Thu, 01 Jan 1970 00:00:01 GMT; path=/; domain=.vk.com; secure; HttpOnly
remixlang=3; expires=Mon, 01 Mar 2027 21:45:12 GMT; path=/; domain=.vk.com
remixstlid=9108196572223582913_jWZUaI2gusqftYp22d1eD9wNHENOqHYZVz49f59t8JX; expires=Thu, 25 Feb 2027 03:18:52 GMT; path=/; domain=.vk.com; secure
prcl=baa540361d001d; expires=Thu, 26 Feb 2026 02:18:52 GMT; path=/; domain=.vk.com; secure; HttpOnly
remixir=DELETED; expires=Thu, 01 Jan 1970 00:00:01 GMT; path=/; domain=.vk.com; secure; HttpOnly
remixQUIC=DELETED; expires=Thu, 01 Jan 1970 00:00:01 GMT; path=/; domain=.vk.com; secure
remixff=0; expires=Sat, 07 Mar 2026 03:18:52 GMT; path=/; domain=.vk.com; secure
remixua=-1%7C-1%7C-1%7C1980567665; expires=Tue, 02 Mar 2027 05:16:56 GMT; path=/; domain=.vk.com; secure

Other Headers

Date

Other

Wed, 25 Feb 2026 03:18:52 GMT

Link

Other

URL https://api.vk.com/

rel=dns-prefetch

URL https://top-fwz1.mail.ru/

rel=dns-prefetch

URL https://r3.mail.ru/

rel=dns-prefetch

URL https://www.tns-counter.ru/

rel=dns-prefetch

Reporting-Endpoints

Other

default="https://m.vk.com/browser_reports?dest=default_reports"

Server-Timing

Other

tid;desc="8Ph0XwIhN063B-2R_HkGVgW-OX_ldQ",front;dur=67.254

X-Frontend

Other

front656600

X-Trace-Id

Other

8Ph0XwIhN063B-2R_HkGVgW-OX_ldQ

X-Trace-Id-V2

Other

019c92ce8099782e84066529aea362d8

date: Wed, 25 Feb 2026 03:18:52 GMT
link: <https://api.vk.com/>; rel=dns-prefetch, <https://top-fwz1.mail.ru/>; rel=dns-prefetch, <https://r3.mail.ru/>; rel=dns-prefetch, <https://www.tns-counter.ru/>; rel=dns-prefetch, <https://stats.vk-portal.net/>; rel=dns-prefetch, <https://st.vk.com/>; rel=dns-prefetch
reporting-endpoints: default="https://m.vk.com/browser_reports?dest=default_reports"
server-timing: tid;desc="8Ph0XwIhN063B-2R_HkGVgW-OX_ldQ",front;dur=67.254
x-frontend: front656600
x-trace-id: 8Ph0XwIhN063B-2R_HkGVgW-OX_ldQ
x-trace-id-v2: 019c92ce8099782e84066529aea362d8

Recommendations

Enable compression (gzip/brotli) to improve performance

Consider removing X-Powered-By header to hide server technology