To prevent your account information from being obtained in a phishing scheme, only log in to legitimate pages of the websites you have an account with. For example, www.website.example.com is not a legitimate page on the www.website.com domain, but www.website.com/example is a legitimate page because it has the website.com domain. When in doubt, you can always just type our domain name into your browser to return to the legitimate site.