“There’s no surefire way to detect either malicious Google ads or punycode-encoded URLs. Posting https://ķeepass.info into all five major browsers leads to the imposter site.”
Ah, yes. But, using Privacy Browser Android, the true punycode URL of https://xn--eepass-vbb.info/ is revealed.