Shazzer logo

Characters allowed after hostname but don't change the hostname

⚠ Browser differences
Chrome logo 80
Firefox logo 80
Edge logo 80
Safari logo 64

Checks what characters can be added at the end of "https://example.com", while keeping the hostname "example.com"

ThomasOrlita
Created byThomasOrlita
Created Apr 15, 2024
Updated May 28, 2025

Tweet
Detecting browser...
CategoryURL Handling
VisibilityPublic
TypeJS
CharsetUTF-8
Template used:
if (new URL("https://example.com" + String.fromCodePoint($[i])).hostname === 'example.com'){log($[i])}

Sample payloads

if (new URL("https://example.com" + String.fromCodePoint(0)).hostname === 'example.com'){alert(0)}
if (new URL("https://example.com" + String.fromCodePoint(1)).hostname === 'example.com'){alert(1)}
if (new URL("https://example.com" + String.fromCodePoint(2)).hostname === 'example.com'){alert(2)}
if (new URL("https://example.com" + String.fromCodePoint(3)).hostname === 'example.com'){alert(3)}
if (new URL("https://example.com" + String.fromCodePoint(4)).hostname === 'example.com'){alert(4)}
if (new URL("https://example.com" + String.fromCodePoint(5)).hostname === 'example.com'){alert(5)}
if (new URL("https://example.com" + String.fromCodePoint(6)).hostname === 'example.com'){alert(6)}
if (new URL("https://example.com" + String.fromCodePoint(7)).hostname === 'example.com'){alert(7)}
if (new URL("https://example.com" + String.fromCodePoint(8)).hostname === 'example.com'){alert(8)}
if (new URL("https://example.com" + String.fromCodePoint(9)).hostname === 'example.com'){alert(9)}
if (new URL("https://example.com" + String.fromCodePoint(10)).hostname === 'example.com'){alert(10)}
if (new URL("https://example.com" + String.fromCodePoint(11)).hostname === 'example.com'){alert(11)}
if (new URL("https://example.com" + String.fromCodePoint(12)).hostname === 'example.com'){alert(12)}
if (new URL("https://example.com" + String.fromCodePoint(13)).hostname === 'example.com'){alert(13)}
if (new URL("https://example.com" + String.fromCodePoint(14)).hostname === 'example.com'){alert(14)}
if (new URL("https://example.com" + String.fromCodePoint(15)).hostname === 'example.com'){alert(15)}
if (new URL("https://example.com" + String.fromCodePoint(16)).hostname === 'example.com'){alert(16)}
if (new URL("https://example.com" + String.fromCodePoint(17)).hostname === 'example.com'){alert(17)}
if (new URL("https://example.com" + String.fromCodePoint(18)).hostname === 'example.com'){alert(18)}
if (new URL("https://example.com" + String.fromCodePoint(19)).hostname === 'example.com'){alert(19)}

Fuzz results

Chrome logo
Chrome 144.0.0.0 desktop Windows NT 10.0

Updated

Sun Jan 25 2026
Found 80 results
Loading...
Chrome logo
Chrome 127.0.0.0 desktop macOS 10.15.7older version

Updated

Tue Aug 20 2024
Found 64 results
Loading...
Chrome logo
Chrome 124.0.0.0 Unknown Unknownolder version

Updated

Tue Apr 30 2024
Found 64 results
Loading...
Firefox logo
Firefox 147.0 desktop Windows NT 10.0

Updated

Tue Jan 27 2026
Found 80 results
Loading...
Firefox logo
Firefox 129.0 desktop macOS 10.15older version

Updated

Tue Aug 20 2024
Found 64 results
Loading...
Firefox logo
Firefox 125.0 Unknown Unknownolder version

Updated

Tue Apr 30 2024
Found 64 results
Loading...
Edge logo
Microsoft Edge 144.0.0.0 desktop Windows NT 10.0

Updated

Mon Jan 26 2026
Found 80 results
Loading...
Safari logo
Safari 17.6 mobile iOS 17.6.1

Updated

Tue Aug 20 2024
Found 64 results
Loading...
Safari logo
Safari 17.4 Unknown Unknownolder version

Updated

Tue Apr 30 2024
Found 64 results
Loading...