Just a quick post on unmasking character-substitutions, using a technique I haven't seen discussed anywhere yet.
Consider the following website:
https://www.rnicrosoft.com
I'm not picking on Microsoft here - they just happen to have an m in their name, which bears an unfortunate similarity to rn.
Or, it does in lowercase. And here, many of you probably see where I'm going: convert the address to uppercase and we get:
HTTPS://WWW.RNICROSOFT.COM
... which is clearly not the domain of the maker of Windows.
In this case, I relied on Microsoft Word for a bit of help, using the convert-case function on the font section of the Home tab's ribbon, but many programming languages have similar functions - Python, for example has upper(), while C and C++ use toupper().
