A misinterpretation from browser perspective which can lead to a phishing attacks, read here https://nakedsecurity.sophos.com/2017/04/19/phishing-with-punycode-when-foreign-letters-spell-english-words
Chrome is fine now (v58+) but Firefox not, so stay sharp!