James Seng hits the nail on the head in his blog today when he asks:
"The fact Secunia is able to register paypal.com (with Cyrillic a), ie xn--pypal-4ve.com begs a question - why are they able to do so?"