Why a Login URL Even Shows Up in an SEO Audit

Nobody sets out to get https://app.trivas.ai/login?step=signin indexed. It just happens.

App routes like this get crawled through internal links buried in a navbar, through an old sitemap that never got trimmed, or through query-string variants Google decided to index on its own. One parameter gets discovered, Googlebot treats it as a distinct URL, and now it's sitting in your index next to pages that actually earn traffic.