Gmail - URL Scan Results

Summary

A Concise Overview of the scan result of url https://accounts.google.com/v3/signin/identifier?continue=https://mail.google.com/mail/u/0/&emr=1&followup=https://mail.google.com/mail/u/0/&osid=1&passive=1209600&service=mail&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S102064468:1793222675678633#inbox

Document
HTML
3
StyleSheets
0
Scripts
1
Font
1
Images
2
Links
2
JavaScript Variables
47
Console log messages
0
Network
Requests
9
Bytes Transferred
192.87KB
Bytes Total
1.2MB

DNS Record
A Record
1
AAAA Record
1
Technology
Security
1
Miscellaneous
1

Links

The outgoing links identified from the page.

Link	Text
https://support.google.com/chrome/answer/6130773?hl=en-US	Learn more about using Guest mode (external, opens in a new window)Learn more about using Guest mode
https://support.google.com/accounts?hl=en-US&p=account_iph	Open Google Account Help Center (external, opens in a new window)Help

JavaScript Variables

Global JavaScript variables are variables that are defined outside of any function or block scope in JavaScript.

onpagerevealobjecteventundefinedonbeforetoggleobjectoncommandobjectonscrollendobjectonanimationcancelobjectOAuthConsentobjectcrashReportobjectdocumentPictureInPictureobjectfetchLaterfunctionviewportobjectonpageswapobjectfenceobjectonscrollsnapchangeobjectonscrollsnapchangingobjectongamepadconnectedobjectongamepaddisconnectedobjectWIZ_global_dataobject_F_toggles_default_AccountsSignInUiobjectcc_latency_start_timenumberonaftfunction_isLazyImagefunctionlfunctioncc_aidstringiml_startnumbercss_sizenumbercc_latencyobjectccTickfunctiononJsLoadfunctiononCssLoadfunction_isVisiblefunction_recordImlElfunctionprtnumberwiz_tickfunction_F_cssRowKeystring_F_combinedSignaturestring_DumpExceptionfunctionBOQ_wizbindobjectAF_initDataKeysobjectAF_dataServiceRequestsobjectAF_initDataChunkQueueobjectAF_initDataCallbackfunctionAF_initDataInitializeCallbackundefinedaft_counterobjectinitAftfunctionIJ_valuesobject_wjddobject

Technology

The technologies identified are present on the scanned URL.

Name	Description	Detected patterns
Security
HSTS https://www.rfc-editor.org/rfc/rfc6797#section-6.1	HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.	Type: headers Name: strict-transport-security Regex: (?:)
Miscellaneous
HTTP/3 https://httpwg.org/	HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.	Type: headers Name: alt-svc Regex: h3

Type	Name	Content	DNSSEC
A	accounts.google.com	74.125.132.84	no
AAAA	accounts.google.com	2607:f8b0:4001:c70::54	no

SSL Certificate

An SSL certificate is a digital certificate that verifies the authenticity and encrypts the communication between a website and its visitors.

Subject	Issue date	Expiry date	Valid
accounts.google.com	10/27/2026	10/28/2027	1 year 1 day
www.gstatic.com	10/27/2026	10/28/2027	1 year 1 day
fonts.gstatic.com	10/27/2026	10/28/2027	1 year 1 day

HTTP Header

An HTTP header is a component of an HTTP request or response that contains additional information about the message being sent or received.

Name	Value
Accept-CH	Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
Alt-Svc	h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
Cache-Control	no-cache, no-store, max-age=0, must-revalidate
Content-Encoding	gzip
Content-Security-Policy	script-src 'report-sample' 'nonce-ffup25LPEL8eo4yX4UHXMQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self' script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://ssl.gstatic.com/external_hosted/lottie/lottie_light.js https://www.google.com/tools/feedback/ https://www.gstatic.com/feedback/js/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/ https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://support.google.com/inapp/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport
Content-Security-Policy-Report-Only	script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js https://translate.google.com/translate_a/element.js https://www.google.com/recaptcha/api.js https://www.google.com/recaptcha/enterprise.js https://www.gstatic.com/recaptcha/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.google.com/tools/feedback/chat_load.js https://www.google.com/tools/feedback/help_api.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.gstatic.com/feedback/js/ https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.google.com/js/bg/ https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.SjvJ_Xm97gY.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://translate.googleapis.com/_/translate_http/_/js/ https://www.gstatic.com/recaptcha/releases/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist
Content-Type	text/html; charset=utf-8
Cross-Origin-Opener-Policy-Report-Only	same-origin; report-to="AccountsSignInUi"
Cross-Origin-Resource-Policy	same-site
Date	Wed, 28 Oct 2026 21:24:35 GMT
Expires	Mon, 01 Jan 1990 00:00:00 GMT
Link	<https://workspace.google.com/gmail/>; rel="canonical"
Permissions-Policy	ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*
Pragma	no-cache
Report-To	{"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
Server	ESF
Strict-Transport-Security	max-age=31536000; includeSubDomains
Transfer-Encoding	chunked
Vary	Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
X-Content-Type-Options	nosniff
X-Frame-Options	DENY
X-XSS-Protection	0
reporting-endpoints	default="/v3/signin/_/AccountsSignInUi/web-reports?context=eJwNw30s1HEcB3B95_teu1QW5WlrTWujhmMe2rSaTJbjOL_7cQ_OxZzOZs7D0ZKxhlPxh61JQ6NWS6Os-adVpBax5k5cuYfMmodlKlEsS1uf1_aS9PDjkkAPRUigx3Dwc_bo8Av2jFoLnGyOnh50slT6Jc3FAuQuFkIdFhezvnYxS7SbVd51s-T4BZagW2RJ1HNgiUUqltlO1zK75bXCOuh6zQprdFp5O32caONDGTZuvmfjFnqDdlHjhQ-8mEYemeaJtNzfzhto6Ek7D6MjqXZep_3I34Y6-Dg1mhx8o9rBfa84eOKWgyfT0QQn7z7h4hdr3fyQy80D6YT9M5-k93NT8DVZhm-0rVuGuvcy1NPNeRm2qc8PGdI3ZHg4k4rQ8DSE0a2KNOw2p2HVIsca7WuTY4BOu9Lh-T0do7MZmKBV0Qp86lHA9EqBCmpdVGCaxvVnwjmSCeNSJn4eFPCbevsL8KXrsQI2acopAXK6lCdghf6hO9QnX4AftfcLeLItoFSvhJmaapSYf6DEmTEl5iQirnmJyD4moqpIxNFqEavNItaoOCDi6ZCIsGERZe9EVNJ6m4iIoSxcpY20hbbSdtpJ82aykBWUDQ0Va7OhpnEBKsRTvyQVAunZPhXO0cImNYxjahTTgr9q5J7XoOWSBq20o1eDO3ThjQbjWi38OrUIorcHteiie4JzsJ9KGnKwj0426fCvWQf_lzr0Tumwa28ulhtzocrWwz4SE3DAa_fNqeuz8O4Z7_3FgiPyTWX6ogJDibnIfLmw3FRiNpQU5FWajZVFFYbyKkO5PkoaFRspjYoJl8bqS6X_AUcEF1A"
x-auto-login	realm=com.google&args=service%3Dmail%26continue%3Dhttps://mail.google.com/mail/u/0/
x-ua-compatible	IE=edge

Content Security Policy

Content Security Policy (CSP) is a security mechanism that helps prevent cross-site scripting (XSS) and other code injection attacks by specifying which content sources are allowed to be loaded on a web page.

Name	Value

Cookies

Cookies are small pieces of data stored on a user's web browser to track and remember information about their browsing activity on a website.

Name	Value	Domain/Path	Expires	Secure	HTTP Only
24054281746706930	3	onbit.pro/	10/28/2027, 9:24:35 PM	yes	yes
jasgd1o47akuhs	104.28.161.242	onbit.pro/	10/28/2027, 9:24:35 PM	yes	yes
__Host-GAPS	1:O2NUX7hlrNXrb2SCqyHXmy3wKGWjFg:7wCH1RC78dFEeMi6	accounts.google.com/	12/2/2027, 9:24:35 PM	yes	yes

URL Scan Results for the page [Gmail](https://accounts.google.com/v3/signin/identifier?continue=https://mail.google.com/mail/u/0/&emr=1&followup=https://mail.google.com/mail/u/0/&osid=1&passive=1209600&service=mail&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S102064468:1793222675678633#inbox)

URL basic Information and screenshot

Summary

Document