There is the homograph attack, but browsers do their best to mitigate it nowadays.

https://en.wikipedia.org/wiki/IDN_homograph_attack