Unicode sleight of hand makes it hard for even savvy users to detect impostor sites.

https://arstechnica.com/security/2017/04/chrome-firefox-and-opera-users-beware-this-isnt-the-apple-com-you-want/