IDNs allow domain spoofing in the location bar.

If you use Firefox:
1. In the address bar, enter: about:config
2. Click “I accept the risks!”
3. Search for: network.IDN_show_punycode
4. Double click it to change it to true