> there are no clear ways to avoid these threats other than by taking a few extra seconds to inspect the URL as it appears in the address bar I can think of at

> there are no clear ways to avoid these threats other than by taking a few extra seconds to inspect the URL as it appears in the address bar I can think of at least one mitigation: have the browser display some kind of prominent indicator or even a warning whenever the URL includes a punycode domain.