Ummm. Interesting about mailoji. Not actually legit according to ICANN to use "non collating" punycode or multiple languages in an ICANN-controlled domain: you can't register them.
But, it's a CC TLD, in fact it's .kz who I still carry a scar or two from when they issued some domains starting with "-": you know what happens when you "dig -yo.tld"? OWASP applies to domain names.
However, the RFCs for the actual _protocol_ declare a label can contain "any octet", so you can use and abuse this in FQDNs under your control and the internet police won't come to get you. "poop".example.com would be fine if you control example.com (either as a quoted string or as an emoji), so would "rm -rf *.example.com".
But, it's a CC TLD, in fact it's .kz who I still carry a scar or two from when they issued some domains starting with "-": you know what happens when you "dig -yo.tld"? OWASP applies to domain names.
However, the RFCs for the actual _protocol_ declare a label can contain "any octet", so you can use and abuse this in FQDNs under your control and the internet police won't come to get you. "poop".example.com would be fine if you control example.com (either as a quoted string or as an emoji), so would "rm -rf *.example.com".