Unicode Domains

These are literally the devil. Please see a very legitimate looking url for a Proof of Concept. https://www.аррӏе.com/ this works best on Firefox, Opera, and older versions of Chrome.

For more details see the following blog post. https://www.xudongz.com/blog/2017/idn-phishing/