// index.html--:--:--
If you can read this,
the server is alive.
This host exists for developer experience and security testing only. No production data is routed here. Endpoints may be unstable, return synthetic payloads, or be intentionally vulnerable. Treat anything you see as scratch.
Hostname
localhost
resolved at boot
Build
2026.05.12·a1f3c20
commit on main
Purpose
devex & security
non-production
Uptime
00:00:00
since this page loaded
// notes
The page renders, the eyes track, the timestamps tick. That's the smoke test. Everything beyond this point is yours to break.
- →
GET /healthz— liveness probe - →
GET /echo— reflects request - →
POST /sink— discards payload, returns 204 - →
ANY /fuzz/*— intentionally weird