Site report for https://vk.com

IPv4 address (87.240.190.67)

IP range	Country	Name	Description
0.0.0.0-255.255.255.255	N/A	IANA-BLK	The whole IPv4 address space
↳ 87.0.0.0-87.255.255.255	Netherlands	87-RIPE	RIPE Network Coordination Centre
↳ 87.240.128.0-87.240.191.255	Russian Federation	RU-VKONTAKTE-20091223
↳ 87.240.160.0-87.240.191.255	Russian Federation	VKONTAKTE-SPB-NET	Vkontakte Ltd
↳ 87.240.190.67	Russian Federation	VKONTAKTE-SPB-NET	Vkontakte Ltd

Signed Certificate Timestamps (SCTs)

Source	Log	Timestamp	Signature Verification
Certificate	Google Rocketeer 7ku9t3XOYLrhQmkfq+GeZqMPfl+wctiDAMR7iXqo/cs=	2019-07-11 17:13:54	Success
Certificate	Sectigo Mammoth b1N2rDHwMRnYmQCkURX/dxUcEdkCwQApBo2yCJo32RM=	2019-07-11 17:13:55	Success

Google EV whitelist

Certificate is not in Google's EV whitelist.

SSLv3/POODLE

Heartbleed

The site did not offer the Heartbeat TLS extension prior to the Heartbleed disclosure, and so was not exploitable.

This test does not exploit the Heartbleed vulnerability but uses information from conventional HTTPS requests. More information about Heartbleed detection.

Netblock owner	IP address	OS	Web server	Last seen
Vkontakte Ltd	87.240.139.194	Linux	VK	17-Jan-2020
Vkontakte Ltd	87.240.190.67	Linux	VK	16-Dec-2019
Vkontakte Ltd	93.186.225.208	Linux	VK	27-Nov-2019
Vkontakte Ltd	87.240.139.194	Linux	VK	7-Nov-2019
Vkontakte Ltd	87.240.190.78	Linux	VK	7-Nov-2019
Vkontakte Ltd	87.240.190.67	Linux	VK	22-Oct-2019
Vkontakte Ltd	87.240.139.194	Linux	VK	9-Oct-2019
Vkontakte Ltd	93.186.225.197	Linux	VK	27-Aug-2019
Vkontakte Ltd	87.240.182.224	Linux	VK	9-Aug-2019
Vkontakte Ltd	93.186.225.197	Linux	VK	2-Jul-2019

A host's Sender Policy Framework (SPF) describes who can send mail on its behalf. This is done by publishing an SPF record containing a series of rules. Each rule consists of a qualifier followed by a specification of which domains to apply this qualifier to. For more information please see open-spf.org.

Qualifier	Mechanism	Argument
+ (Pass)	ip4	93.186.224.0/20
+ (Pass)	ip4	87.240.128.0/18
+ (Pass)	ip4	95.142.192.0/21
+ (Pass)	mx
+ (Pass)	include	_spf.google.com
- (Fail)	all

DMARC (Domain-based Message Authentication, Reporting and Conformance) is a mechanism for domain owners to indicate how mail purporting to originate from their domain should be authenticated. It builds on SPF and DKIM, providing a method to set policy and to give reporting of failures. For more information please see dmarc.org.

Raw DMARC record:

v=DMARC1; p=reject; sp=reject; pct=100; rua=mailto:postmaster@vk.com

Tag	Field	Value
p=reject	Requested handling policy	Reject: emails that fail the DMARC mechanism check should be rejected. Rejection SHOULD occur during the SMTP transaction.
sp=reject	Requested handling policy for subdomains	Reject: emails that fail the DMARC mechanism check should be rejected. Rejection SHOULD occur during the SMTP transaction.
pct=100	Sampling rate	100% of messages from the Domain Owner's mail stream should have DMARC applied.
rua=mailto:postmaster@vk.com	Reporting URI(s) for aggregate data	postmaster@vk.com

Web Trackers are third-party resources loaded onto a webpage. Trackable resources include social sharing widgets, javascript files, and images. These trackers can be used to monitor individual user behaviour across the web. Data derived from these trackers are primarily used for advertising or analytics purposes.

3 known trackers were identified.

• Server-Side

  Includes all the main technologies that Netcraft detects as running on the server such as PHP.

  Technology	Description	Popular sites using this technology
  PHP Enabled	Server supports PHP	www.trendupdeal.com, www.bom.gov.au, widgets.getpocket.com

• Client-Side

  Includes all the main technologies that run on the browser (such as JavaScript and Adobe Flash).

  Technology	Description	Popular sites using this technology
  Session Storage	No description	www.bankofamerica.com, www.hbg.com, www.grammarly.com
  JavaScript	Widely-supported programming language commonly used to power client-side dynamic content on websites	medium.com, t.co

• Client-Side Scripting Frameworks

  Frameworks or libraries allow for easier development of applications by providing an Application Program Interface (API) or a methodology to follow whilst developing.

  Technology	Description	Popular sites using this technology
  AJAX	No description	www.amazon.com, www.w3schools.com, www.amazon.fr
  Google Hosted Libraries	Google API to retrieve JavaScript libraries	www.google.com, www.researchgate.net, www.geeksforgeeks.org

• Character Encoding

  A character encoding system consists of a code that pairs each character from a given repertoire with something else such as a bit pattern, sequence of natural numbers, octets, or electrical pulses in order to facilitate the transmission of data (generally numbers or text) through telecommunication networks or for data storage.

  Technology	Description	Popular sites using this technology
  UTF8	UCS Transformation Format 8 bit

• HTTP Compression

  HTTP compression is a capability that can be built into web servers and web clients to make better use of available bandwidth, and provide greater transmission speeds between both.

  Technology	Description	Popular sites using this technology
  Gzip Content Encoding	Gzip HTTP Compression protocol	www.tsetmc.com, fr.shopping.rakuten.com, polaris.xfinity.com

• Web Browser Targeting

  Web browser targeting enables software applications to make use of specific functions of the browser as well as optimizing the application for specific browser versions.

  Technology	Description	Popular sites using this technology
  Document Compatibility Mode	A meta-tag used in Internet Explorer 8 to enable compatibility mode	www.msn.com, outlook.live.com, teams.microsoft.com
  Strict Transport Security	Web security policy mechanism whereby a web server declares that complying user agents are to interact with it using only secure HTTP connections	www.bitmex.com, login.microsoftonline.com, vk.com
  X-Frame-Options Same Origin	Do not allow this site to be rendered within an iframe	paragon-na.amazon.com, secure-assets.rubiconproject.com, accounts.google.com
  Content Security Policy Report	Detect, mitigate and report attacks in the browser	www.seznam.cz, www.icloud.com, www.yandex.ru
  Content Security Policy	Detect and mitigate attacks in the browser	www.mozilla.org, vars.hotjar.com, opus.analytics.yahoo.com

• Doctype

  A Document Type Declaration, or DOCTYPE, is an instruction that associates a particular SGML or XML document (for example, a webpage) with a Document Type Definition (DTD).

  Technology	Description	Popular sites using this technology
  HTML5	Latest revision of the HTML standard, the main markup language on the web

• HTML 5

  HTML5 is a markup language for structuring and presenting content for the World Wide Web and a core technology of the Internet. It is the fifth revision of the HTML standard.

  Technology	Description	Popular sites using this technology
  Viewport meta tag	HTML5 tag usually used for mobile optimization

• CSS Usage

  Cascading Style Sheets (CSS) is a style sheet language used for describing the presentation semantics (the look and formatting) of a document written in a markup language (such as XHTML).

  Technology	Description	Popular sites using this technology
  External	Styles defined within an external CSS file	www.udemy.com, www.microsoft.com, www.linkedin.com