If you click on a link to Forbes.com you expect to be taken to the Forbes website. But fraudsters that want to steal your passwords or credit cards info have an incredibly sneaky way of showing you a link that looks like a site you trust but sends you to a very convincing phishing site instead. For example, if an attacker wanted to spoof the Forbes domain, they might register the domain name xn--0xa0vo267doa5di.com. Chrome and Firefox will display that mess of characters as forbes.com. It's proven to be a difficult technique to thwart because of the legitimate uses of Punycode in domain names.

Source: Forbes April 17, 2017 15:00 UTC