Typo-squatting attacks with major domains are still viable — corner cases with Cyrillic characters still evade the best checks