My protection against phishing is my password manager. If the site is fake, it won't find the password for it.