in a real browser

Which is a major security risk and you should avoid those "real browsers".

by displaying Unicode characters an attacker can send you a link that clearly shows its yahoo.com and you see in the browser url that its yahoo.com but in reality its unicode letters that look similar to latin one.

that's really bad