I have combined the security measures into this post:
I have added:
6 do not click on a link before examining the URL - watch out for URL "look-alike" phishing attacks
7 always examine the URL that is showing (usually on the lower left of the browser panel) when you mouse over it without clicking it - i.e., "look before you leap" == "examine the true URL before you click"
8 in all instances, check out whoever sends you the URL - whether it is in an email or on your post in addition to #7 above. Here, reputation matters. One can check the reputation score and / or check out the stats on https://steemd.com first
6 is new and creative and need special care.
7 disguised URL's are very old tricks but are very effective or it will not be used any more.
8 - check out the reputation score and steemd.com are specificlly useful and important here.
All the best!