Uses CSP violations to determine if external resources have been requested. This fuzzes characters before the src attribute.
<img $[chr]src=https://fuzz.shazzer.co.uk/$[rand]?$[i]><img 0x09src=https://fuzz.shazzer.co.uk/63omzjg3w5l?9><img
src=https://fuzz.shazzer.co.uk/ghzlk50l9hm?10><img 0x0Csrc=https://fuzz.shazzer.co.uk/uf1j5r7a9y?12><img
src=https://fuzz.shazzer.co.uk/kov7fwd6ic?13><img src=https://fuzz.shazzer.co.uk/e50whryyp0g?32><img /src=https://fuzz.shazzer.co.uk/r5pbdnfbs6?47><img 0x09src=https://fuzz.shazzer.co.uk/mxzo6giry4c?9><img
src=https://fuzz.shazzer.co.uk/zicpq8sutfo?10><img 0x0Csrc=https://fuzz.shazzer.co.uk/00er9v4g4nza6?12><img
src=https://fuzz.shazzer.co.uk/ibsu5d1gnc?13><img src=https://fuzz.shazzer.co.uk/sh0ncr9i8v?32><img /src=https://fuzz.shazzer.co.uk/0t4bmjzgw2fn?47><img 0x09src=https://fuzz.shazzer.co.uk/s8x72icyla?9><img
src=https://fuzz.shazzer.co.uk/oqt4ebtj19r?10><img 0x0Csrc=https://fuzz.shazzer.co.uk/np0xgcfghb?12><img
src=https://fuzz.shazzer.co.uk/gk0yinohb65?13><img src=https://fuzz.shazzer.co.uk/ywy8r0rnp2s?32><img /src=https://fuzz.shazzer.co.uk/ba2cbvtg53f?47><img 0x09src=https://fuzz.shazzer.co.uk/ofn4ehr9vmb?9><img
src=https://fuzz.shazzer.co.uk/v2al9nlcz?10>