# target should be without http/s example.com evil.com testphp.vulnweb.com