Krebs On Security has an interesting example of how domain names can be spoofed in international alphabets; there was a thread here a while ago with the esteemed John Levine (and I learned lots!). https://www.schneier.com/blog/archives/2005/02/unicode_url_hac_1.html