Let's see if I can knock together "paypal" out of Cyrillic...

  раура

The hard part is the "L," which you can sort-of fake with a 1.

  раура1.bg

The "one-script" idea is better than nothing, but it's far from complete. For any two European scripts, the overlap of shared characters is substantial. Some domains will have good protection, and others nothing at all.

[edit] Oh, here's a better one:

  раур.al

This one abuses the Albanian top-level domain to look like a cute shortened version. Albania has a small population of native Russian- and Bulgarian-speakers who would have legitimate cause for using a Cyrillic-script domain.