{"report_id":"e5c54f0b-dabb-4652-90f8-5da0ab38552c","version":6,"status":"done","tags":[],"date":"2026-06-01T23:04:13Z","url":{"schema":"https","addr":"xss-game.appspot.com/level1/frame?tok=OAI_I01_M3763_M5080_1610\u0026query=%3Cscript%3Evar%20f%3Ddocument.createElement%28%27form%27%29%3Bf.method%3D%27POST%27%3Bf.action%3D%22https%3A%2F%2Functadstat-api.unctad.org%2Fdatamart-api%2FUS.Gender_TradableIndustries%2F1312%2FFacts%3Fsubscription-key%3D433468f8d0c4401e9cd359beec6d2bd4%22%3Bvar%20i%3Ddocument.createElement%28%27input%27%29%3Bi.name%3D%22%24select%22%3Bi.value%3D%22Economy%2FCode%2CYear%2CM3763%2FValue%2CM5080%2FValue%22%3Bf.appendChild%28i%29%3Bvar%20i%3Ddocument.createElement%28%27input%27%29%3Bi.name%3D%22%24filter%22%3Bi.value%3D%22Industry%2FCode%20eq%20%27I01%27%20and%20Economy%2FCode%20in%20%28%271610%27%2C%271620%27%2C%271640%27%29%20and%20Sex%2FCode%20eq%20%271%27%20and%20Year%20in%20%282000%2C2010%2C2020%29%22%3Bf.appendChild%28i%29%3Bvar%20i%3Ddocument.createElement%28%27input%27%29%3Bi.name%3D%22%24orderby%22%3Bi.value%3D%22Economy%2FCode%2CYear%22%3Bf.appendChild%28i%29%3Bvar%20i%3Ddocument.createElement%28%27input%27%29%3Bi.name%3D%22culture%22%3Bi.value%3D%22en%22%3Bf.appendChild%28i%29%3Bdocument.body.appendChild%28f%29%3Bf.submit%28%29%3B%3C%2Fscript%3E","fqdn":"xss-game.appspot.com","domain":"xss-game.appspot.com","tld":"appspot.com"},"ip":{"addr":"216.58.201.212","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"unctadstat-api.unctad.org/datamart-api/US.Gender_TradableIndustries/1312/Facts?subscription-key=433468f8d0c4401e9cd359beec6d2bd4","fqdn":"unctadstat-api.unctad.org","domain":"unctad.org","tld":"org"},"title":"unctadstat-api.unctad.org/datamart-api/US.Gender_TradableIndustries/1312/Facts?subscription-key=433468f8d0c4401e9cd359beec6d2bd4","dom":{"size":55072,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (55072), with no line terminators","md5":"e647d00c7fb6de40ca2da3bdabf79838","sha1":"819719f752cd34da146a9dbd1140e5d905946487","sha256":"d99a57b8e8258761e3023b6cef2b0258f716ba5ea5c4915e6d9f19f92ad24728","sha512":"75082df980b8e30f3ae3ce1e2a9192f110f4f632d29082b9facdc3bff0af93221907f692b871f4c3d3615fac262f6438225387fc0e9d6453249fe595be28c2b3","ssdeep":"1536:OFZOwc1Fat9/UvHCbUtydhR2Lvv576e/TRo7R3zNO:N","tlshash":"5633fea0b4d1097698af57d560f09769b0d2e02fdc5020879ea607be27fbcb1398e5cd","dom_hash":"domhashd6e993467fe8d32933586c8832914a70","first_seen":"2026-06-01T23:04:14.733909Z","last_seen":"2026-06-01T23:04:14.733909Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"xss-game.appspot.com/level1/frame?tok=OAI_I01_M3763_M5080_1610\u0026query=%3Cscript%3Evar%20f%3Ddocument.createElement%28%27form%27%29%3Bf.method%3D%27POST%27%3Bf.action%3D%22https%3A%2F%2Functadstat-api.unctad.org%2Fdatamart-api%2FUS.Gender_TradableIndustries%2F1312%2FFacts%3Fsubscription-key%3D433468f8d0c4401e9cd359beec6d2bd4%22%3Bvar%20i%3Ddocument.createElement%28%27input%27%29%3Bi.name%3D%22%24select%22%3Bi.value%3D%22Economy%2FCode%2CYear%2CM3763%2FValue%2CM5080%2FValue%22%3Bf.appendChild%28i%29%3Bvar%20i%3Ddocument.createElement%28%27input%27%29%3Bi.name%3D%22%24filter%22%3Bi.value%3D%22Industry%2FCode%20eq%20%27I01%27%20and%20Economy%2FCode%20in%20%28%271610%27%2C%271620%27%2C%271640%27%29%20and%20Sex%2FCode%20eq%20%271%27%20and%20Year%20in%20%282000%2C2010%2C2020%29%22%3Bf.appendChild%28i%29%3Bvar%20i%3Ddocument.createElement%28%27input%27%29%3Bi.name%3D%22%24orderby%22%3Bi.value%3D%22Economy%2FCode%2CYear%22%3Bf.appendChild%28i%29%3Bvar%20i%3Ddocument.createElement%28%27input%27%29%3Bi.name%3D%22culture%22%3Bi.value%3D%22en%22%3Bf.appendChild%28i%29%3Bdocument.body.appendChild%28f%29%3Bf.submit%28%29%3B%3C%2Fscript%3E","fqdn":"xss-game.appspot.com","domain":"xss-game.appspot.com","tld":"appspot.com"},"ip":{"addr":"216.58.201.212","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-06T23:04:13Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"unctadstat-api.unctad.org","ip":{"addr":"172.66.174.241","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"1995-02-17","domain_rank":0,"first_seen":"2026-04-13T01:13:45.518265Z","last_seen":"2026-05-26T21:09:38.07059Z","alert_count":0,"request_count":1,"received_data":1713,"sent_data":745,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"xss-game.appspot.com","ip":{"addr":"142.250.178.52","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-03-10","domain_rank":0,"first_seen":"2025-06-27T00:26:06.907839Z","last_seen":"2026-06-01T22:57:58.733964Z","alert_count":0,"request_count":2,"received_data":2359,"sent_data":3162,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"xss-game.appspot.com/level1/frame?tok=OAI_I01_M3763_M5080_1610\u0026query=%3Cscript%3Evar%20f%3Ddocument.createElement%28%27form%27%29%3Bf.method%3D%27POST%27%3Bf.action%3D%22https%3A%2F%2Functadstat-api.unctad.org%2Fdatamart-api%2FUS.Gender_TradableIndustries%2F1312%2FFacts%3Fsubscription-key%3D433468f8d0c4401e9cd359beec6d2bd4%22%3Bvar%20i%3Ddocument.createElement%28%27input%27%29%3Bi.name%3D%22%24select%22%3Bi.value%3D%22Economy%2FCode%2CYear%2CM3763%2FValue%2CM5080%2FValue%22%3Bf.appendChild%28i%29%3Bvar%20i%3Ddocument.createElement%28%27input%27%29%3Bi.name%3D%22%24filter%22%3Bi.value%3D%22Industry%2FCode%20eq%20%27I01%27%20and%20Economy%2FCode%20in%20%28%271610%27%2C%271620%27%2C%271640%27%29%20and%20Sex%2FCode%20eq%20%271%27%20and%20Year%20in%20%282000%2C2010%2C2020%29%22%3Bf.appendChild%28i%29%3Bvar%20i%3Ddocument.createElement%28%27input%27%29%3Bi.name%3D%22%24orderby%22%3Bi.value%3D%22Economy%2FCode%2CYear%22%3Bf.appendChild%28i%29%3Bvar%20i%3Ddocument.createElement%28%27input%27%29%3Bi.name%3D%22culture%22%3Bi.value%3D%22en%22%3Bf.appendChild%28i%29%3Bdocument.body.appendChild%28f%29%3Bf.submit%28%29%3B%3C%2Fscript%3E","fqdn":"xss-game.appspot.com","domain":"xss-game.appspot.com","tld":"appspot.com"},"ip":{"addr":"142.250.178.52","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"ff1113fba3bbfc58cdaaaa70b00d5d2d","sha1":"3e1cbccd15c470f2aa470ac5a26ad72f383af229","sha256":"f432dc71500fd19fb70dc133f40ec2257461cf7b439d04b2cf4343bdf5f84dad","sha512":"37423edd6603bc53a23771a5a96876ac884287561285a6ac7f30eb3e8b6fe46c8dac4b62c2b7b9a0d8f088a3600c250d1b4f3b10e1e866b41cbcc63b640b8d30","ssdeep":"","tlshash":"3e01d0553db0cd2817684cfbe6b5a769f8bc62b05411610153e8dc1cb768d01003ac5f","size":748,"data":"","first_seen":"2026-06-01T23:04:14.738182Z","last_seen":"2026-06-01T23:04:14.738182Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xss-game.appspot.com/static/game-frame.js","fqdn":"xss-game.appspot.com","domain":"xss-game.appspot.com","tld":"appspot.com"},"ip":{"addr":"142.250.178.52","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"57d2113f533c9a1b7d372b9b56a3c5fd","sha1":"923b7fd3e0a7da8b355fad31668edcfcda3114b1","sha256":"4dabf3a32f93f726344e5110250fbe393b325faf642ad4e912b6fcdb5ae38e4c","sha512":"c9088d199d7d0f46a24beb407032ba454cf82ccdc71c83f69e394a06dda8c907f00fc5952edef06855e8dbaf2069e7b7066bccd76f134eff64a7c33d3a705fa8","ssdeep":"","tlshash":"43f05519b5f98ef4132537b1232fbf8034a352842022ad92f5dc904d1b1072f461ebd9","size":440,"data":"","first_seen":"2026-05-25T09:22:58.678803Z","last_seen":"2026-06-01T23:08:11.723722Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"unctadstat-api.unctad.org/datamart-api/US.Gender_TradableIndustries/1312/Facts?subscription-key=433468f8d0c4401e9cd359beec6d2bd4","fqdn":"unctadstat-api.unctad.org","domain":"unctad.org","tld":"org"},"ip":{"addr":"172.66.174.241","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-01T23:03:51.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unctad.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 09:27:35 GMT","end":"Wed, 05 Aug 2026 10:27:32 GMT"},"fingerprint":{"sha1":"2B:A7:72:CB:32:2D:65:6C:8D:F8:DB:A6:20:7F:D3:EE:CF:4C:1C:B1","sha256":"F4:E9:4E:F2:CE:A2:AE:2A:DE:B5:9C:F9:45:0D:56:5E:86:5D:FD:3F:35:6D:3C:FB:3E:A9:02:0C:C8:23:60:C8"}}},"request":{"raw":"POST /datamart-api/US.Gender_TradableIndustries/1312/Facts?subscription-key=433468f8d0c4401e9cd359beec6d2bd4 HTTP/1.1\r\nHost: unctadstat-api.unctad.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 274\r\nOrigin: https://xss-game.appspot.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xss-game.appspot.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":274,"data":"%24select=Economy%2FCode%2CYear%2CM3763%2FValue%2CM5080%2FValue\u0026%24filter=Industry%2FCode+eq+%27I01%27+and+Economy%2FCode+in+%28%271610%27%2C%271620%27%2C%271640%27%29+and+Sex%2FCode+eq+%271%27+and+Year+in+%282000%2C2010%2C2020%29\u0026%24orderby=Economy%2FCode%2CYear\u0026culture=en"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 01 Jun 2026 23:03:51 GMT\r\ncontent-type: application/json; charset=utf-8; odata.metadata=minimal; odata.streaming=true\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\nrequest-context: appId=cid-v1:91d02cc2-becc-44a8-aeb0-03e315318773\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfEdge;dur=20,cfOrigin;dur=43\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\ncf-ray: a051daa289cb5684-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1080,"size_decoded":0,"mime_type":"application/vnd.mozilla.json.view; charset=utf-8","magic":"JSON text data","md5":"47fd51e8c46c3155e443d8b75823dcba","sha1":"f828811c27609bf2422cb71d53a332e1666a71e5","sha256":"35fa871f9817b61432b0ded70272b16ed86eceffa9559c5f1708831f97cbd184","sha512":"3654c1f8db9aea3d622bb039495dd0a07b364f316edd757415ef8a7daec22052344c97ea3ea54ad3316dfaafb43a089e5da631183e6ba64daccd804a222d6663","ssdeep":"","tlshash":"7c11d2236dd4d73b70388c46f637ad00f176327a50c10e62111ce9be7de082fa208da6","first_seen":"2026-06-01T23:04:14.735123Z","last_seen":"2026-06-01T23:04:14.735123Z","times_seen":1,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":17,"dns":1,"connect":1,"send":0,"wait":69,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xss-game.appspot.com/level1/frame?tok=OAI_I01_M3763_M5080_1610\u0026query=%3Cscript%3Evar%20f%3Ddocument.createElement%28%27form%27%29%3Bf.method%3D%27POST%27%3Bf.action%3D%22https%3A%2F%2Functadstat-api.unctad.org%2Fdatamart-api%2FUS.Gender_TradableIndustries%2F1312%2FFacts%3Fsubscription-key%3D433468f8d0c4401e9cd359beec6d2bd4%22%3Bvar%20i%3Ddocument.createElement%28%27input%27%29%3Bi.name%3D%22%24select%22%3Bi.value%3D%22Economy%2FCode%2CYear%2CM3763%2FValue%2CM5080%2FValue%22%3Bf.appendChild%28i%29%3Bvar%20i%3Ddocument.createElement%28%27input%27%29%3Bi.name%3D%22%24filter%22%3Bi.value%3D%22Industry%2FCode%20eq%20%27I01%27%20and%20Economy%2FCode%20in%20%28%271610%27%2C%271620%27%2C%271640%27%29%20and%20Sex%2FCode%20eq%20%271%27%20and%20Year%20in%20%282000%2C2010%2C2020%29%22%3Bf.appendChild%28i%29%3Bvar%20i%3Ddocument.createElement%28%27input%27%29%3Bi.name%3D%22%24orderby%22%3Bi.value%3D%22Economy%2FCode%2CYear%22%3Bf.appendChild%28i%29%3Bvar%20i%3Ddocument.createElement%28%27input%27%29%3Bi.name%3D%22culture%22%3Bi.value%3D%22en%22%3Bf.appendChild%28i%29%3Bdocument.body.appendChild%28f%29%3Bf.submit%28%29%3B%3C%2Fscript%3E","fqdn":"xss-game.appspot.com","domain":"xss-game.appspot.com","tld":"appspot.com"},"ip":{"addr":"142.250.178.52","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-01T23:03:50.820Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.appspot.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:51:16 GMT","end":"Thu, 30 Jul 2026 15:51:15 GMT"},"fingerprint":{"sha1":"7A:5B:DB:78:58:B8:25:07:E8:FC:96:B2:C7:9D:59:D3:02:C1:98:F9","sha256":"B9:4E:4C:D3:BC:20:41:7F:45:32:E2:2A:DD:DD:58:F9:27:B5:3E:C8:05:25:62:1C:40:BA:B3:C4:23:11:F1:81"}}},"request":{"raw":"GET /level1/frame?tok=OAI_I01_M3763_M5080_1610\u0026query=%3Cscript%3Evar%20f%3Ddocument.createElement%28%27form%27%29%3Bf.method%3D%27POST%27%3Bf.action%3D%22https%3A%2F%2Functadstat-api.unctad.org%2Fdatamart-api%2FUS.Gender_TradableIndustries%2F1312%2FFacts%3Fsubscription-key%3D433468f8d0c4401e9cd359beec6d2bd4%22%3Bvar%20i%3Ddocument.createElement%28%27input%27%29%3Bi.name%3D%22%24select%22%3Bi.value%3D%22Economy%2FCode%2CYear%2CM3763%2FValue%2CM5080%2FValue%22%3Bf.appendChild%28i%29%3Bvar%20i%3Ddocument.createElement%28%27input%27%29%3Bi.name%3D%22%24filter%22%3Bi.value%3D%22Industry%2FCode%20eq%20%27I01%27%20and%20Economy%2FCode%20in%20%28%271610%27%2C%271620%27%2C%271640%27%29%20and%20Sex%2FCode%20eq%20%271%27%20and%20Year%20in%20%282000%2C2010%2C2020%29%22%3Bf.appendChild%28i%29%3Bvar%20i%3Ddocument.createElement%28%27input%27%29%3Bi.name%3D%22%24orderby%22%3Bi.value%3D%22Economy%2FCode%2CYear%22%3Bf.appendChild%28i%29%3Bvar%20i%3Ddocument.createElement%28%27input%27%29%3Bi.name%3D%22culture%22%3Bi.value%3D%22en%22%3Bf.appendChild%28i%29%3Bdocument.body.appendChild%28f%29%3Bf.submit%28%29%3B%3C%2Fscript%3E HTTP/1.1\r\nHost: xss-game.appspot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache\r\nx-xss-protection: 0\r\ncontent-encoding: gzip\r\nx-cloud-trace-context: 28698e6ef55ba4792fe6c6a4c83b9b71\r\nvary: Accept-Encoding\r\ndate: Mon, 01 Jun 2026 23:03:51 GMT\r\nserver: Google Frontend\r\ncontent-length: 592\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":1161,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (833)","md5":"1e6fb90d9f64a6f04ec81914bdf4d9bc","sha1":"f0fc0fe0f96056a9262f7fac4086ef6bffdf8497","sha256":"721e7cf48e517fff8690a4fe40ef175294918010e788ae725a21f285c6ad6639","sha512":"41691ed0b22f700aedb96f9b87e6267fa34b35a718dcc69ef82f1e8839b747bb4d62d495c379c0813acd7ab2273d5fdda56e617d41970cab4c4ce79ad9a5dde7","ssdeep":"","tlshash":"4521e4652cf0cd2917644ce775b57b69fda992619121b40073eccd2cbb54e41083bc5f","first_seen":"2026-06-01T23:04:14.736235Z","last_seen":"2026-06-01T23:04:14.736235Z","times_seen":1,"resource_available":false,"data":null}},"time_used":432,"timings":{"blocked":127,"dns":1,"connect":28,"send":0,"wait":176,"receive":0,"ssl":97},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xss-game.appspot.com/static/game-frame.js","fqdn":"xss-game.appspot.com","domain":"xss-game.appspot.com","tld":"appspot.com"},"ip":{"addr":"142.250.178.52","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xss-game.appspot.com/level1/frame?tok=OAI_I01_M3763_M5080_1610\u0026query=%3Cscript%3Evar%20f%3Ddocument.createElement%28%27form%27%29%3Bf.method%3D%27POST%27%3Bf.action%3D%22https%3A%2F%2Functadstat-api.unctad.org%2Fdatamart-api%2FUS.Gender_TradableIndustries%2F1312%2FFacts%3Fsubscription-key%3D433468f8d0c4401e9cd359beec6d2bd4%22%3Bvar%20i%3Ddocument.createElement%28%27input%27%29%3Bi.name%3D%22%24select%22%3Bi.value%3D%22Economy%2FCode%2CYear%2CM3763%2FValue%2CM5080%2FValue%22%3Bf.appendChild%28i%29%3Bvar%20i%3Ddocument.createElement%28%27input%27%29%3Bi.name%3D%22%24filter%22%3Bi.value%3D%22Industry%2FCode%20eq%20%27I01%27%20and%20Economy%2FCode%20in%20%28%271610%27%2C%271620%27%2C%271640%27%29%20and%20Sex%2FCode%20eq%20%271%27%20and%20Year%20in%20%282000%2C2010%2C2020%29%22%3Bf.appendChild%28i%29%3Bvar%20i%3Ddocument.createElement%28%27input%27%29%3Bi.name%3D%22%24orderby%22%3Bi.value%3D%22Economy%2FCode%2CYear%22%3Bf.appendChild%28i%29%3Bvar%20i%3Ddocument.createElement%28%27input%27%29%3Bi.name%3D%22culture%22%3Bi.value%3D%22en%22%3Bf.appendChild%28i%29%3Bdocument.body.appendChild%28f%29%3Bf.submit%28%29%3B%3C%2Fscript%3E","date":"2026-06-01T23:03:51.330Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.appspot.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:51:16 GMT","end":"Thu, 30 Jul 2026 15:51:15 GMT"},"fingerprint":{"sha1":"7A:5B:DB:78:58:B8:25:07:E8:FC:96:B2:C7:9D:59:D3:02:C1:98:F9","sha256":"B9:4E:4C:D3:BC:20:41:7F:45:32:E2:2A:DD:DD:58:F9:27:B5:3E:C8:05:25:62:1C:40:BA:B3:C4:23:11:F1:81"}}},"request":{"raw":"GET /static/game-frame.js HTTP/1.1\r\nHost: xss-game.appspot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xss-game.appspot.com/level1/frame?tok=OAI_I01_M3763_M5080_1610\u0026query=%3Cscript%3Evar%20f%3Ddocument.createElement%28%27form%27%29%3Bf.method%3D%27POST%27%3Bf.action%3D%22https%3A%2F%2Functadstat-api.unctad.org%2Fdatamart-api%2FUS.Gender_TradableIndustries%2F1312%2FFacts%3Fsubscription-key%3D433468f8d0c4401e9cd359beec6d2bd4%22%3Bvar%20i%3Ddocument.createElement%28%27input%27%29%3Bi.name%3D%22%24select%22%3Bi.value%3D%22Economy%2FCode%2CYear%2CM3763%2FValue%2CM5080%2FValue%22%3Bf.appendChild%28i%29%3Bvar%20i%3Ddocument.createElement%28%27input%27%29%3Bi.name%3D%22%24filter%22%3Bi.value%3D%22Industry%2FCode%20eq%20%27I01%27%20and%20Economy%2FCode%20in%20%28%271610%27%2C%271620%27%2C%271640%27%29%20and%20Sex%2FCode%20eq%20%271%27%20and%20Year%20in%20%282000%2C2010%2C2020%29%22%3Bf.appendChild%28i%29%3Bvar%20i%3Ddocument.createElement%28%27input%27%29%3Bi.name%3D%22%24orderby%22%3Bi.value%3D%22Economy%2FCode%2CYear%22%3Bf.appendChild%28i%29%3Bvar%20i%3Ddocument.createElement%28%27input%27%29%3Bi.name%3D%22culture%22%3Bi.value%3D%22en%22%3Bf.appendChild%28i%29%3Bdocument.body.appendChild%28f%29%3Bf.submit%28%29%3B%3C%2Fscript%3E\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-cloud-trace-context: 1a69fe018505567960204779fef42d20\r\ncontent-encoding: gzip\r\nserver: Google Frontend\r\ncontent-length: 303\r\ndate: Mon, 01 Jun 2026 22:57:37 GMT\r\nexpires: Mon, 01 Jun 2026 23:07:37 GMT\r\ncache-control: public, max-age=600\r\nage: 374\r\netag: \"2q59WA\"\r\ncontent-type: text/javascript\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":440,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"57d2113f533c9a1b7d372b9b56a3c5fd","sha1":"923b7fd3e0a7da8b355fad31668edcfcda3114b1","sha256":"4dabf3a32f93f726344e5110250fbe393b325faf642ad4e912b6fcdb5ae38e4c","sha512":"c9088d199d7d0f46a24beb407032ba454cf82ccdc71c83f69e394a06dda8c907f00fc5952edef06855e8dbaf2069e7b7066bccd76f134eff64a7c33d3a705fa8","ssdeep":"","tlshash":"43f05519b5f98ef4132537b1232fbf8034a352842022ad92f5dc904d1b1072f461ebd9","first_seen":"2026-05-25T09:22:58.678803Z","last_seen":"2026-06-01T23:08:11.723722Z","times_seen":26,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}