The best defense is to manually enter the url of the domain you need to log on to and log on from there. Never follow links, that what will get you in trouble.