urlquery.net
WEBSITE ANALYSIS REPORT

https://xss-game.appspot.com/level1/frame?tok=OAI_I01_M3763_M5080_1610&query=%3Cscript%3Evar%20f%3Ddocument.createElement%28%27form%27%29%3Bf.method%3D%27POST%27%3Bf.action%3D%22https%3A%2F%2Functadstat-api.unctad.org%2Fdatamart-api%2FUS.Gender_TradableIndustries%2F1312%2FFacts%3Fsubscription-key%3D433468f8d0c4401e9cd359beec6d2bd4%22%3Bvar%20i%3Ddocument.createElement%28%27input%27%29%3Bi.name%3D%22%24select%22%3Bi.value%3D%22Economy%2FCode%2CYear%2CM3763%2FValue%2CM5080%2FValue%22%3Bf.appendChild%28i%29%3Bvar%20i%3Ddocument.createElement%28%27input%27%29%3Bi.name%3D%22%24filter%22%3Bi.value%3D%22Industry%2FCode%20eq%20%27I01%27%20and%20Economy%2FCode%20in%20%28%271610%27%2C%271620%27%2C%271640%27%29%20and%20Sex%2FCode%20eq%20%271%27%20and%20Year%20in%20%282000%2C2010%2C2020%29%22%3Bf.appendChild%28i%29%3Bvar%20i%3Ddocument.createElement%28%27input%27%29%3Bi.name%3D%22%24orderby%22%3Bi.value%3D%22Economy%2FCode%2CYear%22%3Bf.appendChild%28i%29%3Bvar%20i%3Ddocument.createElement%28%27input%27%29%3Bi.name%3D%22culture%22%3Bi.value%3D%22en%22%3Bf.appendChild%28i%29%3Bdocument.body.appendChild%28f%29%3Bf.submit%28%29%3B%3C%2Fscript%3E

public
Report tags
Submit tags
Request review

Report summary

Submitted and final observations · captured HTTP activity

Submitted URL
https://xss-game.appspot.com/level1/frame?tok=OAI_I01_M3763_M5080_1610&query=%3Cscript%3Evar%20f%3Ddocument.createElement%28%27form%27%29%3Bf.method%3D%27POST%27%3Bf.action%3D%22https%3A%2F%2Functadstat-api.unctad.org%2Fdatamart-api%2FUS.Gender_TradableIndustries%2F1312%2FFacts%3Fsubscription-key%3D433468f8d0c4401e9cd359beec6d2bd4%22%3Bvar%20i%3Ddocument.createElement%28%27input%27%29%3Bi.name%3D%22%24select%22%3Bi.value%3D%22Economy%2FCode%2CYear%2CM3763%2FValue%2CM5080%2FValue%22%3Bf.appendChild%28i%29%3Bvar%20i%3Ddocument.createElement%28%27input%27%29%3Bi.name%3D%22%24filter%22%3Bi.value%3D%22Industry%2FCode%20eq%20%27I01%27%20and%20Economy%2FCode%20in%20%28%271610%27%2C%271620%27%2C%271640%27%29%20and%20Sex%2FCode%20eq%20%271%27%20and%20Year%20in%20%282000%2C2010%2C2020%29%22%3Bf.appendChild%28i%29%3Bvar%20i%3Ddocument.createElement%28%27input%27%29%3Bi.name%3D%22%24orderby%22%3Bi.value%3D%22Economy%2FCode%2CYear%22%3Bf.appendChild%28i%29%3Bvar%20i%3Ddocument.createElement%28%27input%27%29%3Bi.name%3D%22culture%22%3Bi.value%3D%22en%22%3Bf.appendChild%28i%29%3Bdocument.body.appendChild%28f%29%3Bf.submit%28%29%3B%3C%2Fscript%3E
Submitted IP / ASN
United States 216.58.201.212 AS15169 · GOOGLE
Final URL
https://unctadstat-api.unctad.org/datamart-api/US.Gender_TradableIndustries/1312/Facts?subscription-key=433468f8d0c4401e9cd359beec6d2bd4
Final IP / ASN
Country unknown 172.66.174.241 AS13335 · CLOUDFLARENET

Final page

Page title
unctadstat-api.unctad.org/datamart-api/US.Gender_TradableIndustries/1312/Facts?subscription-key=433468f8d0c4401e9cd359beec6d2bd4
Final DOM MIME
text/html; charset=utf-8
Final DOM size
53.8 KB (55072 bytes)

Detections

URLQuery
0
IDS
0
TDS
0

Activity

HTTP requests
3
Observed hosts
2
Script records
2

Estimated HTTP data

Sent
~4.1 KB
Received
~4.0 KB

Page capture

Final browser state

Recorded title

unctadstat-api.unctad.org/datamart-api/US.Gender_TradableIndustries/1312/Facts?subscription-key=433468f8d0c4401e9cd359beec6d2bd4

53.8 KB final DOM

Detection signals

URLQuery findings, Threat Detection Systems, and IDS alerts

No detection observations

Absence of findings is not a clean verdict.

Host infrastructure

Observed hosts are context, not independent maliciousness verdicts

HostRankRegisteredFirst seenLast seenSentReceivedIPFingerprints
unctadstat-api.unctad.org N/A1995-02-172026-04-132026-05-26745 B1.7 KBCountry unknown 172.66.174.241
xss-game.appspot.com N/A2005-03-102025-06-272026-06-013.1 KB2.3 KBUnited States 142.250.178.52
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close

LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot