Host splitting attack with unicode charaters.
You can get the chars with bruteforce in javascript or python.

Original writeup (https://eine.tistory.com/entry/BambooCTF-2021-web-SSRFrog-Time-to-Draw-write-up).