Krebs On Security has an interesting example of how domain names can be
spoofed in international alphabets; there was a thread here a while ago
with the esteemed John Levine (and I learned lots!).
https://www.schneier.com/blog/archives/2005/02/unicode_url_hac_1.html