Typically, when obfuscating a URL, you must trick someone into viewing a website they did not want to view by tempting them with something they are familiar with.

Products affected:

Latest Version of Google chrome android

Steps To Reproduce:

We can trick someone into viewing it like this:
http://example.com@sample.com
This will make the user think they are going to go to example.com, when really they are going to sample.com.

Live POC:
https://google.com@gmail.com

They thought they will be redirect to google.com but the page displays gmail.com