Most of what I mentioned did obfuscate the domain name. Users do not care about domain name security boundaries - that's yet again an implementation detail. An important one, but still not something most users recognize or care about. Hence, you know, why phishing is so successful.