Characters allowed after hostname but don't change the hostname
⚠ Browser differences
Checks what characters can be added at the end of "https://example.com", while keeping the hostname "example.com"
Created byThomasOrlita
Created Apr 15, 2024
Updated May 28, 2025
Detecting browser...
CategoryURL Handling
VisibilityPublic
TypeJS
CharsetUTF-8
Template used:
if (new URL("https://example.com" + String.fromCodePoint($[i])).hostname === 'example.com'){log($[i])}Sample payloads
if (new URL("https://example.com" + String.fromCodePoint(0)).hostname === 'example.com'){alert(0)}if (new URL("https://example.com" + String.fromCodePoint(1)).hostname === 'example.com'){alert(1)}if (new URL("https://example.com" + String.fromCodePoint(2)).hostname === 'example.com'){alert(2)}if (new URL("https://example.com" + String.fromCodePoint(3)).hostname === 'example.com'){alert(3)}if (new URL("https://example.com" + String.fromCodePoint(4)).hostname === 'example.com'){alert(4)}if (new URL("https://example.com" + String.fromCodePoint(5)).hostname === 'example.com'){alert(5)}if (new URL("https://example.com" + String.fromCodePoint(6)).hostname === 'example.com'){alert(6)}if (new URL("https://example.com" + String.fromCodePoint(7)).hostname === 'example.com'){alert(7)}if (new URL("https://example.com" + String.fromCodePoint(8)).hostname === 'example.com'){alert(8)}if (new URL("https://example.com" + String.fromCodePoint(9)).hostname === 'example.com'){alert(9)}if (new URL("https://example.com" + String.fromCodePoint(10)).hostname === 'example.com'){alert(10)}if (new URL("https://example.com" + String.fromCodePoint(11)).hostname === 'example.com'){alert(11)}if (new URL("https://example.com" + String.fromCodePoint(12)).hostname === 'example.com'){alert(12)}if (new URL("https://example.com" + String.fromCodePoint(13)).hostname === 'example.com'){alert(13)}if (new URL("https://example.com" + String.fromCodePoint(14)).hostname === 'example.com'){alert(14)}if (new URL("https://example.com" + String.fromCodePoint(15)).hostname === 'example.com'){alert(15)}if (new URL("https://example.com" + String.fromCodePoint(16)).hostname === 'example.com'){alert(16)}if (new URL("https://example.com" + String.fromCodePoint(17)).hostname === 'example.com'){alert(17)}if (new URL("https://example.com" + String.fromCodePoint(18)).hostname === 'example.com'){alert(18)}if (new URL("https://example.com" + String.fromCodePoint(19)).hostname === 'example.com'){alert(19)}Fuzz results
Chrome 145.0.0.0 desktop Windows NT 10.0
Updated16 Feb 2026
Found 80 results
Loading...
Chrome 127.0.0.0 desktop macOS 10.15.7older version
Updated20 Aug 2024
Found 64 results
Loading...
Chrome 124.0.0.0 Unknown Unknownolder version
Updated30 Apr 2024
Found 64 results
Loading...
Firefox 148.0 desktop Windows NT 10.0
Updated23 Feb 2026
Found 80 results
Loading...
Firefox 129.0 desktop macOS 10.15older version
Updated20 Aug 2024
Found 64 results
Loading...
Firefox 125.0 Unknown Unknownolder version
Updated30 Apr 2024
Found 64 results
Loading...
Microsoft Edge 145.0.0.0 desktop Windows NT 10.0
Updated18 Feb 2026
Found 80 results
Loading...
Safari 17.6 mobile iOS 17.6.1
Updated20 Aug 2024
Found 64 results
Loading...
Safari 17.4 Unknown Unknownolder version
Updated30 Apr 2024
Found 64 results
Loading...