Audit Result

UUID: 01a0bb4b-61ac-71d3-92d8-e34e797aca33

Share on X Recheck Back to history
accounts.google.com

https://accounts.google.com/v3/signin/identifier?continue=https://aistudio.google.com/app/api-keys&followup=https://aistudio.google.com/app/api-keys&passive=1209600&flowName=WebLiteSignIn&flowEntry=ServiceLogin&dsh=S151455680:1789848673153842

Scanned 1 month ago

71
Fair Score
39 total checks
Passed
19
Warnings
17
Errors
3

Meta Information

  • Title Tag Warning

    Found 25 characters. Keep title between 30 and 60 characters.

    Fix: Add a unique <title> tag describing the main page intent in 30-60 characters.

  • Meta Description Error

    Missing meta description.

    Fix: Add <meta name="description" content="..."> in <head> with a clear page summary.

  • Canonical URL Warning

    Canonical link not found.

    Fix: Add <link rel="canonical" href="https://example.com/page"> to avoid duplicate URL ambiguity.

  • Favicon Warning

    No favicon link found in <head>.

    Fix: Add <link rel="icon" href="/favicon.ico"> to ensure browser tab and bookmark visibility.

  • Viewport Meta Pass

    Viewport configured: width=device-width, initial-scale=1

  • HTML Lang Pass

    Language declared as "en-US".

Content Structure

Technical Optimization

  • HTTPS Pass

    Page is served over HTTPS.

  • HSTS & HTTPS Redirect Warning

    1 HTTPS hardening issues detected.

    • • Could not probe the HTTP version of this page.
    • • Strict-Transport-Security: max-age=31536000; includeSubDomains

    Fix: Set Strict-Transport-Security with a long max-age, add includeSubDomains, and redirect all HTTP requests to HTTPS.

  • Security Headers Warning

    Missing: referrer-policy.

    Full HTTP headers (23)
    • • accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
    • • alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
    • • cache-control: no-cache, no-store, max-age=0, must-revalidate
    • • content-encoding: gzip
    • • content-security-policy: script-src 'report-sample' 'nonce-CFqcKyM2d0JeHEX72D7dJQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self' script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://www.google.com/tools/feedback/ https://www.gstatic.com/feedback/js/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/ https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://support.google.com/inapp/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport
    • • content-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js https://translate.google.com/translate_a/element.js https://www.google.com/recaptcha/api.js https://www.google.com/recaptcha/enterprise.js https://www.gstatic.com/recaptcha/ https://www.google.com/tools/feedback/chat_load.js https://www.google.com/tools/feedback/help_api.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.gstatic.com/feedback/js/ https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.wV2-Y3VP3sg.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://translate.googleapis.com/_/translate_http/_/js/ https://www.gstatic.com/recaptcha/releases/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist
    • • content-type: text/html; charset=utf-8
    • • cross-origin-opener-policy-report-only: same-origin; report-to="AccountsSignInUi"
    • • cross-origin-resource-policy: same-site
    • • date: Sat, 19 Sep 2026 20:11:13 GMT
    • • expires: Mon, 01 Jan 1990 00:00:00 GMT
    • • permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
    • • pragma: no-cache
    • • report-to: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
    • • reporting-endpoints: default="/v3/signin/_/AccountsSignInUi/web-reports?context=eJwNw11IU2EABuA5_V7CulhlqQti7KoF2jSmRUGUlKy5n8PZcTaro7aJA9l0OxOyKJdOxCKCsqLuIqgQi7oQUbSboiw0ykUni0oxSDSsSCnyoveBJ3cue3uu2eDdZjaMWIeN-4_NGQ_y1XXzxhucfj8pLrN265U4x718nZvqXotmLrG8Efu4KjAlfBwvyIgOtu3KiCJ-YtPFc_7VrgvTKV1UrOiikjdPfxBmHs98FBO82uGEIeVEKsuFNH-rdGGRz750oZOXP7vwl-9MVcFW7EYRryTcyNHcWOj2YIn7-zx4wL4sL_x8f9CLR5zz3Yt7nT4M8DR_4qfvfBhn1SLhBDv8Eir4RbOESb59UcJdjj2WkOAfm2T8ZlOBjDz-WSZjmQ_vleHhr_Uy5vkPr_LGBhn53KL6oXHstB_t6xWc4baIgoXzCpa49ZmCJPdOKEiNViPNF_gSX-ObXL0lgCAPXAngIZcX1mAPH-ivwSEO_TuCYUsQY3zcGcTOL0FIW2vRZa1FD_cVHsWGtWtm9JG3MA3NjtVZdzTEWtVIKBzVItrJxngsqoWjofqk1pSMJMLxtnBcLbWXltl3lziK7Q61xf4fVRLFXQ"
    • • server: ESF
    • • strict-transport-security: max-age=31536000; includeSubDomains
    • • vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
    • • x-auto-login: realm=com.google&args=continue%3Dhttps://aistudio.google.com/app/api-keys
    • • x-content-type-options: nosniff
    • • x-frame-options: DENY
    • • x-ua-compatible: IE=edge
    • • x-xss-protection: 0

    Fix: Add the missing security headers at your reverse proxy or application layer.

  • CSP Quality Error

    2 CSP hardening issues detected.

    • • script-src/default-src permits 'unsafe-inline'.
    • • CSP is missing frame-ancestors protection.
    • • Content-Security-Policy: script-src 'report-sample' 'nonce-CFqcKyM2d0JeHEX72D7dJQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self' script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://www.google.com/tools/feedback/ https://www.gstatic.com/feedback/js/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/ https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://support.google.com/inapp/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport

    Fix: Tighten Content-Security-Policy by removing unsafe directives and adding object-src, base-uri, and frame-ancestors restrictions.

  • Cookie Security Pass

    No first-party cookies were set during the initial page load.

  • Server Version Disclosure Pass

    Server response headers do not expose version tokens.

  • Cloudflare Proxy Warning

    Domain does not appear to be behind Cloudflare.

  • Perceived Load Time Pass

    Loaded in 0.36s (perceived).

  • Render Blocking Resources Pass

    No render-blocking scripts or styles detected.

  • Compression Pass

    Text-like assets appear compressed.

  • Robots.txt Pass

    Found robots.txt (200).

  • Sitemap File Warning

    Sitemap missing or inaccessible at https://accounts.google.com/sitemap.xml (404).

    Fix: Publish a sitemap.xml and reference it in robots.txt with: Sitemap: https://accounts.google.com/sitemap.xml

  • Crawl Directives Warning

    No robots meta tag defined.

    Fix: Add <meta name="robots" content="index,follow"> (or the intended directive) in <head>.

Accessibility Basics

  • Form Labels Error

    2 of 3 controls are missing labels.

    • • input[type="password"].hJIRO (hiddenPassword)
    • • select.N158t (hl)

    Fix: Associate each form control with a visible label, aria-label, or aria-labelledby.

  • Landmarks Warning

    Missing landmarks: header, nav, main.

    Fix: Use semantic regions (<header>, <nav>, <main>, <footer>) for navigation and assistive tech.

  • Tap Target Size Warning

    4 interactive elements appear smaller than 48px.

    • • a (Forgot email?) - 89x20px
    • • a (Learn more about using Guest mode (external, opens in a new window)) - 236x20px
    • • button#identifierNext.JnOM6e.TrZEUc (Next) - 77x36px
    • • a.JnOM6e.TrZEUc (Create account) - 113x36px

    Fix: Increase target size to at least 48x48 CSS pixels for touch interactions.

Social & Rich Results

  • Open Graph Basics Warning

    Missing og:title or og:description.

    Fix: Add og:title and og:description tags to control social preview text.

  • Open Graph Image Warning

    og:image is missing.

    Fix: Add <meta property="og:image" content="https://..."> with a high-quality share image.

  • Twitter Card Warning

    twitter:card is missing.

    Fix: Add <meta name="twitter:card" content="summary_large_image"> for better previews on X.

  • Structured Data Warning

    No JSON-LD schema scripts found.

    Fix: Add JSON-LD structured data matching your page type (Organization, Article, Product, etc.).

  • PWA Metadata Warning

    Manifest or Apple touch icon is missing.

    Fix: Link your web app manifest and apple-touch-icon for improved install/share experiences.

  • Open Graph/Twitter Quality Warning

    5 social preview quality issues detected.

    • • ISSUE: og:url should be an absolute URL.
    • • ISSUE: og:title should typically be between 10 and 70 characters.
    • • ISSUE: og:description should typically be between 50 and 200 characters.
    • • ISSUE: Use an absolute URL for og:image or twitter:image.
    • • ISSUE: twitter:card is missing.
    • • GUIDELINE: Optimal og:title length: 40-60 characters (acceptable: 10-70).
    • • GUIDELINE: Optimal og:description length: 110-160 characters (acceptable: 50-200).
    • • GUIDELINE: Optimal preview image size: 1200x630 pixels.
    • • GUIDELINE: Optimal preview image aspect ratio: 1.91:1.
    • • GUIDELINE: Optimal preview image file size: under 5 MB.
    • • GUIDELINE: Recommended twitter:card: summary_large_image.

    Fix: Use absolute OG/Twitter URLs, keep metadata lengths in recommended ranges, and provide a preview image near 1200x630 under 5MB.

Links Analysis

  • Internal Links Pass

    Checked 6 links. No broken internal links found.

  • External Links Warning

    2 external links returned errors or timed out.

    • • https://support.google.com/accounts?p=signin_privatebrowsing&hl=en-US (HTTP 404)
    • • https://support.google.com/accounts?hl=en-US&p=account_iph (HTTP 404)

    Fix: Replace dead external URLs or point to working alternatives.

  • Link Format Pass

    All 6 links use non-empty href values.

Performance & Runtime