URL manipulation on phishing site. Never seen this before

I just came across a phishing site pretending to be trezor.io (cryptocurrency wallet)

The url for the phishing site is tręzor.io (NOTICE THE ACCENT BELOW THE LETTER "e")

When visiting the site the above fake url displays in browser's address bar but if you copy the url with the funny e and paste it you get the following output: xn--trzor-k0a.io which is the actual URL of the phishing site.

Has anybody seen anything like this before? Seems like a powerful attack that could catch people out.

submitted by /u/andonevriis
[link] [comments]

from hacking: security in practice https://ift.tt/2NMoS0Z