SageBrush
REJECT Fascism
This is not exactly true. Punycode is a way to fake a TLD. Basically, non-English character sets can be used to create lookalikes. Some browsers provide protection from this, but not all of them.
Very informative and helpful -- thanks.
I found a Wikipedia article that added some more information about website url spoofing, specifically URL redirection and hidden control characters.