Shazzer logo

Characters allowed between hostname and / but don't change the hostname

⚠ Browser differences
Chrome logo 50
Firefox logo 50
Edge logo 50
Safari logo 302

Checks what characters can be added between "https://example.com" and /, while keeping the hostname "example.com"

ThomasOrlita
Created byThomasOrlita
Created Apr 15, 2024
Updated May 28, 2025

Tweet
Detecting browser...
CategoryURL Handling
VisibilityPublic
TypeJS
CharsetUTF-8
Template used:
if (new URL("https://example.com" + String.fromCodePoint($[i]) + "/").hostname === 'example.com'){log($[i])}

Sample payloads

if (new URL("https://example.com" + String.fromCodePoint(9) + "/").hostname === 'example.com'){alert(9)}
if (new URL("https://example.com" + String.fromCodePoint(10) + "/").hostname === 'example.com'){alert(10)}
if (new URL("https://example.com" + String.fromCodePoint(13) + "/").hostname === 'example.com'){alert(13)}
if (new URL("https://example.com" + String.fromCodePoint(35) + "/").hostname === 'example.com'){alert(35)}
if (new URL("https://example.com" + String.fromCodePoint(47) + "/").hostname === 'example.com'){alert(47)}
if (new URL("https://example.com" + String.fromCodePoint(58) + "/").hostname === 'example.com'){alert(58)}
if (new URL("https://example.com" + String.fromCodePoint(63) + "/").hostname === 'example.com'){alert(63)}
if (new URL("https://example.com" + String.fromCodePoint(92) + "/").hostname === 'example.com'){alert(92)}
if (new URL("https://example.com" + String.fromCodePoint(173) + "/").hostname === 'example.com'){alert(173)}
if (new URL("https://example.com" + String.fromCodePoint(847) + "/").hostname === 'example.com'){alert(847)}
if (new URL("https://example.com" + String.fromCodePoint(4447) + "/").hostname === 'example.com'){alert(4447)}
if (new URL("https://example.com" + String.fromCodePoint(4448) + "/").hostname === 'example.com'){alert(4448)}
if (new URL("https://example.com" + String.fromCodePoint(6068) + "/").hostname === 'example.com'){alert(6068)}
if (new URL("https://example.com" + String.fromCodePoint(6069) + "/").hostname === 'example.com'){alert(6069)}
if (new URL("https://example.com" + String.fromCodePoint(6155) + "/").hostname === 'example.com'){alert(6155)}
if (new URL("https://example.com" + String.fromCodePoint(6156) + "/").hostname === 'example.com'){alert(6156)}
if (new URL("https://example.com" + String.fromCodePoint(6157) + "/").hostname === 'example.com'){alert(6157)}
if (new URL("https://example.com" + String.fromCodePoint(6158) + "/").hostname === 'example.com'){alert(6158)}
if (new URL("https://example.com" + String.fromCodePoint(6159) + "/").hostname === 'example.com'){alert(6159)}
if (new URL("https://example.com" + String.fromCodePoint(8203) + "/").hostname === 'example.com'){alert(8203)}

Fuzz results

Chrome logo
Chrome 144.0.0.0 desktop Windows NT 10.0
Updated25 Jan 2026
Found 50 results
Loading...
Chrome logo
Chrome 137.0.0.0 desktop macOS 10.15.7older version
Updated11 Jun 2025
Found 34 results
Loading...
Chrome logo
Chrome 124.0.0.0 Unknown Unknownolder version
Updated1 May 2024
Found 278 results
Loading...
Firefox logo
Firefox 147.0 desktop Windows NT 10.0
Updated31 Jan 2026
Found 50 results
Loading...
Firefox logo
Firefox 139.0 desktop macOS 10.15older version
Updated11 Jun 2025
Found 34 results
Loading...
Firefox logo
Firefox 125.0 Unknown Unknownolder version
Updated1 May 2024
Found 278 results
Loading...
Edge logo
Microsoft Edge 144.0.0.0 desktop Windows NT 10.0
Updated26 Jan 2026
Found 50 results
Loading...
Safari logo
Safari 18.5 desktop macOS 10.15.7
Updated11 Jun 2025
Found 302 results
Loading...
Safari logo
Safari 17.6 mobile iOS 17.6.1older version
Updated20 Aug 2024
Found 34 results
Loading...
Safari logo
Safari 17.4 Unknown Unknownolder version
Updated1 May 2024
Found 278 results
Loading...