Mozilla is the only holdout on this issue AFAIK. Safari and Edge will show the punycode and Chrome 58+ has fixed it as well. The URL is not even visually ident

Mozilla is the only holdout on this issue AFAIK. Safari and Edge will show the punycode and Chrome 58+ has fixed it as well. The URL is not even visually identical due to the dot underneath the letter `d`. Seems to be this unicode character [0]. After the apple.com [1] example of this problem Chrome patched it. The apple.com "spoof" is now xn--80ak6aa92e.com in Chrome. [0] http://www.fileformat.info/info/unicode/char/1e0d/index.htm http://www.fileformat.info/info/unicode/char/1e0d/index.htm [1] https://www.theguardian.com/technology/2017/apr/19/phishing-url-trick-hackers https://www.theguardian.com/technology/2017/apr/19/phishing-...