does someone know how to block such sites till a browser update is released?
Solved! Go to Solution.
Graham Cluley reported on this, drawing from the BleepingComputer article, and I just finished reading his article and testing my browsers.
This can be prevented in Firefox by changing that setting in about:config - I tried it and it works.
In Chrome I see the Punycode URL in the address bar, not the apple[dot]com one. I'm waiting to see what other Chrome users are seeing.