Gmail - URL Scan Results

Summary

A Concise Overview of the scan result of url https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&dsh=S154697697%3A1781974847313402&emr=1&followup=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&osid=1&passive=1209600&service=mail&flowName=GlifWebSignIn&flowEntry=ServiceLogin&ifkv=AcDsRvwxdASNnCVpPS4l1O6TSOEQ5m2iIMeKV0c6LSNeSSOAF7aeAMEEKai-bkaNL7L1k2HUmqzgtg

Document
HTML
4
StyleSheets
0
Scripts
1
Font
1
Images
1
Links
2
JavaScript Variables
40
Console log messages
0
Network
Requests
9
Bytes Transferred
185.89KB
Bytes Total
1.19MB

DNS Record
A Record
1
AAAA Record
1
Technology
Programming languages
1
Web servers
1
Security
1
Miscellaneous
1

Links

The outgoing links identified from the page.

Link	Text
https://support.google.com/chrome/answer/6130773?hl=en-US	Learn more about using Guest mode (external, opens in a new window)Learn more about using Guest mode
https://support.google.com/accounts?hl=en-US&p=account_iph	Open Google Account Help Center (external, opens in a new window)Help

JavaScript Variables

Global JavaScript variables are variables that are defined outside of any function or block scope in JavaScript.

eventundefinedonbeforetoggleobjectOAuthConsentobjectsharedStorageobjectdocumentPictureInPictureobjectfetchLaterfunctiononpageswapobjectonpagerevealobjectfenceobjectonscrollendobjectWIZ_global_dataobject_F_toggles_default_AccountsSignInUiobjectcc_latency_start_timenumberonaftfunction_isLazyImagefunctionlfunctioncc_aidstringiml_startnumbercss_sizenumbercc_latencyobjectccTickfunctiononJsLoadfunctiononCssLoadfunction_isVisiblefunction_recordImlElfunctionprtnumberwiz_tickfunction_F_cssRowKeystring_F_combinedSignaturestring_DumpExceptionfunctionBOQ_wizbindobjectAF_initDataKeysobjectAF_dataServiceRequestsobjectAF_initDataChunkQueueobjectAF_initDataCallbackfunctionAF_initDataInitializeCallbackundefinedaft_counterobjectinitAftfunctionIJ_valuesobject_wjddobject

Technology

The technologies identified are present on the scanned URL.

Name	Description	Detected patterns
Security
HSTS https://www.rfc-editor.org/rfc/rfc6797#section-6.1	HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.	Type: headers Name: strict-transport-security Regex: (?:)
Miscellaneous
HTTP/3 https://httpwg.org/	HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.	Type: headers Name: alt-svc Regex: h3
Web servers
OpenGSE https://code.google.com/p/opengse	OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.	Type: headers Name: server Regex: GSE
Programming languages
Java https://java.com	Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.	Dependent on OpenGSE

Type	Name	Content	DNSSEC
A	accounts.google.com	74.125.26.84	no
AAAA	accounts.google.com	2607:f8b0:400c:c04::54	no

SSL Certificate

An SSL certificate is a digital certificate that verifies the authenticity and encrypts the communication between a website and its visitors.

Subject	Issue date	Expiry date	Valid
accounts.google.com	6/19/2026	6/20/2027	1 year 1 day
www.gstatic.com	6/19/2026	6/20/2027	1 year 1 day
fonts.gstatic.com	6/19/2026	6/20/2027	1 year 1 day

HTTP Header

An HTTP header is a component of an HTTP request or response that contains additional information about the message being sent or received.

Name	Value
Accept-CH	Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
Alt-Svc	h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
Cache-Control	no-cache, no-store, max-age=0, must-revalidate
Content-Encoding	gzip
Content-Security-Policy	require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport script-src 'report-sample' 'nonce-RqUzXDSzdOyVxLAiEf1crQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self' script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://www.google.com/tools/feedback/ https://www.gstatic.com/feedback/js/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/ https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://support.google.com/inapp/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist
Content-Security-Policy-Report-Only	script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js https://translate.google.com/translate_a/element.js https://www.google.com/recaptcha/api.js https://www.google.com/recaptcha/enterprise.js https://www.gstatic.com/recaptcha/ https://www.google.com/tools/feedback/chat_load.js https://www.google.com/tools/feedback/help_api.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.gstatic.com/feedback/js/ https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.6ScBlw9gOxw.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://translate.googleapis.com/_/translate_http/_/js/ https://www.gstatic.com/recaptcha/releases/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist
Content-Type	text/html; charset=utf-8
Cross-Origin-Opener-Policy-Report-Only	same-origin; report-to="AccountsSignInUi"
Cross-Origin-Resource-Policy	same-site
Date	Sat, 20 Jun 2026 17:00:47 GMT
Expires	Mon, 01 Jan 1990 00:00:00 GMT
Link	<https://workspace.google.com/gmail/>; rel="canonical"
Permissions-Policy	ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*
Pragma	no-cache
Report-To	{"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
Server	ESF
Strict-Transport-Security	max-age=31536000; includeSubDomains
Transfer-Encoding	chunked
Vary	Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
X-Content-Type-Options	nosniff
X-Frame-Options	DENY
X-XSS-Protection	0
reporting-endpoints	default="/v3/signin/_/AccountsSignInUi/web-reports?context=eJwNw1tIU3EAB-A1_P8Q8cFsle0hYhC0YDYXHAPrQSRktcs5nR19iuVw4kB29OxspEbZbQ8KhoEaEhQRVEYFERW9WKDYHiwvC48XeuomK6yo0cOifh98FQNl-yucthP7nLZXrhf2xpMf7Ed5rHLDPsGXV96IcTZvvRVZHuTrfGRyXjRy56kF0cV1exZFE-sTiyLFgdYlIfOIIy9G2ajJi0vsPpQXHo7dfCc6eNptidf8s88Sjn5LNBUt0cw7VteEk3P5dTHHpQE_bOf9-NJ8HF_5iSeA53xnKYCrnwIYY3dtEB4upoIoN4MoZEPY5PujITzi-pEwGvjh0zAec9m3MJyKjN28l93sY4nvXZTxgFf5PSefyTB4ZllGjme6FOT49rCCu6xPKUjxhYKCLH_fruIXV9WocHC9S0UD_5BU_OZjh1WEeFJT8bFNxQb_4RJvi6nYyZ__qihw5p-Kl_4Iprk7GoHJ_XyO9TMRBMYj6Nuq4Sxb1RrWOZPQ4D-t4UavhsKQhk3umdWQ5sE5DcVdLRhqbcEVrq4snxpeW0DVfOmatcV1IKb3RBPt8aSZMHs7DD1pxpPtbWmzM51IxY1M3Ij6vD7JK9VJtd6D0W7vf42b1AI"
x-auto-login	realm=com.google&args=service%3Dmail%26continue%3Dhttps://mail.google.com/mail/u/0/
x-ua-compatible	IE=edge

Content Security Policy

Content Security Policy (CSP) is a security mechanism that helps prevent cross-site scripting (XSS) and other code injection attacks by specifying which content sources are allowed to be loaded on a web page.

Name	Value

Cookies

Cookies are small pieces of data stored on a user's web browser to track and remember information about their browsing activity on a website.

Name	Value	Domain/Path	Expires	Secure	HTTP Only
__Host-GAPS	1:JjLRdzZzTcyedMXs-GAyS7FCNBzrfg:KTW0ZWUaqU-Hlpfg	accounts.google.com/	7/25/2027, 5:00:47 PM	yes	yes

URL basic Information and screenshot

Summary

Document