You can't rely on the end users to check the domain name, because * Most users have no idea what a domain name is. * It is tedious to compare the domain name

You can't rely on the end users to check the domain name, because * Most users have no idea what a domain name is. * It is tedious to compare the domain name character by character. * Phishing sites have used many UI tricks historically to make their domain name look authentic (e.g lookalike Unicode characters).