Thx for the hints!

For the important websites like MEW or exchanges I never use any links but always type in the domain name to make sure it is the right one. Once typed in correctly and used my browser autocompletes the address after that.

That's the first step. The second step - before logging in - I always double check the URL and the SSL certificate. This way I was able to avoid any scam or phishing sites so far.

One can never be too cautios about this.