Gmail - URL Scan Results

Summary

A Concise Overview of the scan result of url https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F1%2F&dsh=S-2094426404%3A1778496938822972&emr=1&followup=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F1%2F&osid=1&passive=1209600&service=mail&flowName=GlifWebSignIn&flowEntry=ServiceLogin&ifkv=AWa2PauDLi1rJDpOuGkjfKjcNVAb3ex0m5P84zalAoqe1iXwKKxVKuerblfCaVGTO_3NxqC5S_4NKA#inbox

Document
HTML
3
StyleSheets
0
Scripts
1
Font
1
Images
1
Links
2
JavaScript Variables
41
Console log messages
0
Network
Requests
8
Bytes Transferred
181.67KB
Bytes Total
1.16MB

DNS Record
A Record
1
AAAA Record
1
Technology
Programming languages
1
Web servers
1
Security
1
Miscellaneous
1

Links

The outgoing links identified from the page.

Link	Text
https://support.google.com/chrome/answer/6130773?hl=en-US	Learn more about using Guest mode (external, opens in a new window)Learn more about using Guest mode
https://support.google.com/accounts?hl=en-US&p=account_iph	Help

JavaScript Variables

Global JavaScript variables are variables that are defined outside of any function or block scope in JavaScript.

eventundefinedonbeforetoggleobjectOAuthConsentobjectfenceobjectsharedStorageobjectdocumentPictureInPictureobjectfetchLaterfunctiononpageswapobjectonpagerevealobjectmodelobjectonscrollendobjectWIZ_global_dataobject_F_toggles_default_AccountsSignInUiobjectcc_latency_start_timenumberonaftfunction_isLazyImagefunctionlfunctioncc_aidstringiml_startnumbercss_sizenumbercc_latencyobjectccTickfunctiononJsLoadfunctiononCssLoadfunction_isVisiblefunction_recordImlElfunctionprtnumberwiz_tickfunction_F_cssRowKeystring_F_combinedSignaturestring_DumpExceptionfunctionBOQ_wizbindobjectAF_initDataKeysobjectAF_dataServiceRequestsobjectAF_initDataChunkQueueobjectAF_initDataCallbackfunctionAF_initDataInitializeCallbackundefinedaft_counterobjectinitAftfunctionIJ_valuesobject_wjddobject

Technology

The technologies identified are present on the scanned URL.

Name	Description	Detected patterns
Security
HSTS https://www.rfc-editor.org/rfc/rfc6797#section-6.1	HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.	Type: headers Name: strict-transport-security Regex: (?:)
Miscellaneous
HTTP/3 https://httpwg.org/	HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.	Type: headers Name: alt-svc Regex: h3
Web servers
OpenGSE https://code.google.com/p/opengse	OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.	Type: headers Name: server Regex: GSE
Programming languages
Java https://java.com	Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.	Dependent on OpenGSE

Type	Name	Content	DNSSEC
A	accounts.google.com	142.250.27.84	no
AAAA	accounts.google.com	2a00:1450:4025:401::54	no

SSL Certificate

An SSL certificate is a digital certificate that verifies the authenticity and encrypts the communication between a website and its visitors.

Subject	Issue date	Expiry date	Valid
accounts.google.com	5/10/2026	5/11/2027	1 year 1 day
www.gstatic.com	5/10/2026	5/11/2027	1 year 1 day
fonts.gstatic.com	5/10/2026	5/11/2027	1 year 1 day

HTTP Header

An HTTP header is a component of an HTTP request or response that contains additional information about the message being sent or received.

Name	Value
Accept-CH	Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
Alt-Svc	h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
Cache-Control	no-cache, no-store, max-age=0, must-revalidate
Content-Encoding	gzip
Content-Security-Policy	script-src 'report-sample' 'nonce-45HsNZVDuMYpOUZB6UMMbA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self' script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://www.google.com/tools/feedback/ https://www.gstatic.com/feedback/js/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/ https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://support.google.com/inapp/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport
Content-Security-Policy-Report-Only	script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js https://translate.google.com/translate_a/element.js https://www.google.com/recaptcha/api.js https://www.google.com/recaptcha/enterprise.js https://www.gstatic.com/recaptcha/ https://www.google.com/tools/feedback/chat_load.js https://www.google.com/tools/feedback/help_api.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.gstatic.com/feedback/js/ https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.n7L1AKtevvQ.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://translate.googleapis.com/_/translate_http/_/js/ https://www.gstatic.com/recaptcha/releases/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist
Content-Type	text/html; charset=utf-8
Cross-Origin-Opener-Policy-Report-Only	same-origin; report-to="AccountsSignInUi"
Cross-Origin-Resource-Policy	same-site
Date	Mon, 11 May 2026 10:55:38 GMT
Expires	Mon, 01 Jan 1990 00:00:00 GMT
Link	<https://workspace.google.com/gmail/>; rel="canonical"
Permissions-Policy	ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*
Pragma	no-cache
Report-To	{"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
Server	ESF
Strict-Transport-Security	max-age=31536000; includeSubDomains
Transfer-Encoding	chunked
Vary	Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
X-Content-Type-Options	nosniff
X-Frame-Options	DENY
X-XSS-Protection	0
reporting-endpoints	default="/v3/signin/_/AccountsSignInUi/web-reports?context=eJwNw11IU3EcBuAx_b3IkJBaJbuIGEQtmJ0GrqAixgixzraz_osgqOnYxIXs2NlR6OOiqHbRRaCgC-kiIqgWFUTfBN1kNaIyXbRMu-pL1jclXSzqfeBxzTSsdnkcoVUexz3vXWdo9zvnFh5tnnOO8fHXz6TI9tnnUuATfJo3lSYkxL1dL6SP1y6flDCbY5OSZ33nlBg85K7ICFutFTnGvvUV8XPqzEvp4Qe-qjzmnweq4j5YlfB8VTp4yfQb8XC5MiNP2bFyVhp5c3FWwlw_3AnHkU586tiGz3zdr-M2n5_SMfxBxyj72iLw865sBHt4Ph9Bkx1BrRDFN740EsVVXjcUwwa-cjOGa9z4JQZP3MAyXsE-DnCQu_YaSPPFowYu8zS_5dwtAxaPvzJQ5kd1A094vC-OMp87GccFNu_HkWfXje1YwN8XK_zillYFNw97FYr8I6jwm7duVIhyaYfC-26FOf7DdV6UUljKH_8q1Hjwn0J_MgGbzUMJ6MUEFjY3lWqFCbSc-nrnYYN3Tcrcl8ymMzk7a-_vscycncmluwfs3oFsPmMNZqxkQAsEtXatvU3Tkv3afyk-x8U"
x-auto-login	realm=com.google&args=service%3Dmail%26continue%3Dhttps://mail.google.com/mail/u/1/
x-ua-compatible	IE=edge

Content Security Policy

Content Security Policy (CSP) is a security mechanism that helps prevent cross-site scripting (XSS) and other code injection attacks by specifying which content sources are allowed to be loaded on a web page.

Name	Value

Cookies

Cookies are small pieces of data stored on a user's web browser to track and remember information about their browsing activity on a website.

Name	Value	Domain/Path	Expires	Secure	HTTP Only
__Host-GAPS	1:pEE6LyKs4qewpitNe6rhbWxQ5izwlw:Hd80oWm6V38tXWvp	accounts.google.com/	6/15/2027, 10:55:38 AM	yes	yes

URL basic Information and screenshot

Summary

Document