How to Inspect a Suspicious Link: Punycode, Redirects, WHOIS

Most phishing advice says "hover over the link and check the domain". That works until the domain is spelled with a Cyrillic "а", the real destination hides behind three redirects, or the hostname is