xss-game.appspot.com favicon

xss-game.appspot.com

Category: Education

Scanned: Sep 10, 2026, 14:19 UTC · First seen: Sep 10, 2026 · Threat Engines: 0 / 89 · Times Scanned: 1
98 / 100 Trust Score Based on scan findings at the time of analysis
No Threats Found
0 - High Risk50 - Moderate100 - No Threats
Not scanned has not been scanned yet. Hit Check website to check it.

Scans can take up to 5 minutes to complete. Please keep this tab open - we'll redirect you to the report when it's ready.

Failed
Scan unavailable
Scan failed
Is this your website?
Show visitors your site is safe
Add the PCrisk Trust Badge, re-scanned every 24 hours for malware & threats. A visible security seal reassures visitors, and that trust can turn into more sales, signups & calls.
Automatic re-scans Checked by 90+ security engines WordPress · Shopify · Wix · any site
Get your Trust Badge Copy-paste · quick setup
Get PCrisk security checks in your Google results Add PCrisk as a preferred source and our scan reports and malware guides are prioritised for you in Google.
Add PCrisk as preferred source
Screenshot of xss-game.appspot.com Captured Sep 10, 2026
https://xss-game.appspot.com
Screenshot of xss-game.appspot.com
21 years (appspot.com)
Not Ranked - This website does not appear in the Tranco top list
Not listed (89 checked)
✓ Valid (TLS)
Google LLC
Amsterdam, The Netherlands
Google Frontend
Unknown
142.251.39.116
Domain & WHOIS Information
Registrar MarkMonitor, Inc.
Registered March 10, 2005 (appspot.com)
Expires March 10, 2027
Name Servers ns4.google.com
DNSSEC Unsigned
Hosting Google LLC
This site is hosted on appspot.com - a free hosting platform. The WHOIS data above belongs to the platform, not to xss-game.appspot.com. The actual creation date of this subdomain is unknown and could be as recent as today.
Reputation & Threat Check 89 security engines checked
File Scan Summary Powered by Quttera Engine
19 files scanned
No threats
19
Low Risk
0
Medium Risk
0
High Risk
0
No threats Low Risk Medium Risk High Risk
xss-game.appspot.com/level2 445 B No threats
xss-game.appspot.com/# 3.0 KB No threats
xss-game.appspot.com/static/game-frame.js 440 B No threats
xss-game.appspot.com/static/game-frame-styles.css 5.0 KB No threats
xss-game.appspot.com/static/game.css 4.1 KB No threats
xss-game.appspot.com/static/game.js 4.1 KB No threats
xss-game.appspot.com/level1/? 2.4 KB No threats
xss-game.appspot.com/level1/source 3.0 KB No threats
xss-game.appspot.com/level1/frame 508 B No threats
xss-game.appspot.com/level1/# 2.4 KB No threats
Show 9 more...
External Links & Domains
18
External Links
All Clean
0
Iframes
Clean
1
Referenced Domains
All Clean
0
Flagged Resources
None Detected
http://xss-game.appspot.com/?Not flagged
http://xss-game.appspot.com/level1Not flagged
http://xss-game.appspot.com/level1/frameNot flagged
http://xss-game.appspot.com/level1/sourceNot flagged
http://xss-game.appspot.com/level2Not flagged
http://xss-game.appspot.com/static/game-frame-styles.cssNot flagged
http://xss-game.appspot.com/static/game-frame.jsNot flagged
http://xss-game.appspot.com/static/game.cssNot flagged
http://xss-game.appspot.com/static/game.jsNot flagged
http://xss-game.appspot.com/static/logos/level1.pngNot flagged
http://xss-game.appspot.com/static/syntaxhighlighter/scripts/shBrushJScript.jsNot flagged
http://xss-game.appspot.com/static/syntaxhighlighter/scripts/shBrushPhp.jsNot flagged
http://xss-game.appspot.com/static/syntaxhighlighter/scripts/shBrushPython.jsNot flagged
http://xss-game.appspot.com/static/syntaxhighlighter/scripts/shBrushXml.jsNot flagged
http://xss-game.appspot.com/static/syntaxhighlighter/scripts/shCore.jsNot flagged
Show 3 more...
xss-game.appspot.comNot flagged
xss-game.appspot.com Overview

Description of xss-game.appspot.com

xss-game.appspot.com appears to be an interactive web security training site focused on cross-site scripting (XSS). The page title and on-page text describe it as an "XSS game" where users learn to identify and exploit XSS issues in a controlled challenge environment, suggesting an educational or developer-training purpose rather than a consumer-facing service.

Based on the domain structure and page content, the site appears to be hosted on Google's App Engine platform under the appspot.com domain space. The screenshot text explicitly references Google and bug-finding rewards, which is consistent with a security awareness or training exercise associated with web application security concepts. It does not appear to function as an online store, login portal, or financial service.

Safety Assessment for xss-game.appspot.com

The available scan results are broadly reassuring at the time of this scan. The domain was not flagged by any of 89 security engines, the malware scan reported 0 flagged files out of 19 examined, and external links and referenced domains were not flagged. In addition, multiple blacklist and threat-database checks did not indicate phishing, malware distribution, or other content-based abuse at the time of review.

Context also supports a lower-risk interpretation. The domain has been registered for many years, uses valid HTTPS, and the visible content matches a technical training page about XSS rather than a deceptive storefront or credential-harvesting page. Although the term "XSS" can sound alarming, in this case it appears to refer to a security learning exercise. Based on available scan data, no significant threats were detected at the time of this scan.

Technical Description

The site is served over HTTPS with a valid certificate issued by Google Trust Services, expiring in November 2026. It is hosted on Google infrastructure, uses Google Frontend as the web server layer, and resolves to an IP associated with Google LLC in Amsterdam. The nameserver set is also Google-operated, which is consistent with an App Engine deployment.

DNSSEC appears to be unsigned, which is not uncommon but means DNS responses do not benefit from DNSSEC validation. No technical indicators in the provided scan suggest malicious scripts, flagged iframes, or suspicious third-party dependencies at the time of analysis.

HTTP Redirect Chain
No redirects detected - direct connection to destination
Website Insights
Not Ranked
Tranco Rank
Not in Top 1M
Visitors Unknown
Category: Education
Rank History (30 days)
No rank data available
No cookies data available
Dispute This Score For website owners
Believe this score is inaccurate?
If you are the website owner and believe the scan results contain errors or false positives, you can submit a dispute for manual review. Our team typically responds within 1-2 business days.
You will be asked to verify your email before the dispute can be processed.
By submitting this form, you confirm that the information provided is accurate. Disputes are reviewed manually and results may take up to 48 hours to update.
One more step…
To submit your dispute for xss-game.appspot.com, please click the verification link we just emailed you. Once verified, we'll review it within 1-2 business days.
This report was generated automatically and is provided for informational purposes only. Results are based on a point-in-time scan and may contain false positives or incomplete data. This does not constitute a security audit or certification. No vendor in the market can guarantee a 100% detection rate. If you believe this report is inaccurate, please submit a dispute.

Share your experience with this website. Was it safe? Did you encounter any issues?