One of your best defenses against phishing emails is still hovering over links