My detailed write-up for Intigriti's march challenge.

https://github.com/h43z/writeups/blob/master/0323-intigriti.md

I created a fun little game over at https://ggpt.43z.one

See if you can trick GPT into returning the secret.

TIL domains can have underscores.

﹏｡₄𝟥𝓏｡𝔒𝒩𝔢

⑩ ⑪ ⑫ ⑬ ⑭ ⑮ ⑯ ⑰ ⑱ ⑲ ⑳ ㉑ ㉒ ㉓ ㉔ ㉕ ㉖ ㉗ ㉘ ㉙ ㉚ ㉛ ㉜ ㉝ ㉞ ㉟ ㊱ ㊲ ㊳ ㊴ ㊵ ㊶ ㊷ ㊸ ㊹ ㊺ ㊻ ㊼ ㊽ ㊾ ㊿ IJ LJ NJ DZ ẞ ₨ № ℠ ™ Ⅱ Ⅳ Ⅵ Ⅸ Ⅺ ㋌ ㋎ ㍲ ㍳ ㍵ ㍶ ㍷ ㍺ ㎀ ㎁ ㎃ ㎄ ㎅ ㎆ ㎇ ㎊ ㎋ ㎎ ㎏ ㎐ ㎖ ㎗ ㎘ ㎙ ㎚ ㎜ ㎝ ㎞ ㎡ ㎥ ㎰ ㎱ ㎳ ㎴ ㎵ ㎷ ㎸ ㎺ ㎻ ㎽ ㎾ ㏃ ㏄ ㏅ ㏈ ㏉ ㏊ ㏋ ㏌ ㏍ ㏏ ㏐ ㏑ ㏓ ㏗ ㏚ ㏛ ㏜ ㏝ ff fi fl ſt 🄮 🅊 🅌 🅏 🅪 🅫 🅬 🆐

These are all single Unicode characters. But if you have them within a domain name they get normalized.

№ -> no
🅏 -> wc
http://㎗.㎎-> http://dl.mg

This way you may still be able to get a super short "fake" 1 character domain name (and TLD!)

Like me with http://Ⅷ.㏄

works in your browser, ping, http location header,...