This is a very good point. I nearly fell for a Phishing Scam after clicking on a link posted in the Services board. The link took me to a page looking identical to the login screen of bitcointalk.org. Luckily for me, I checked the URL, which of course wasn't on the bitcointalk domain, and I didn't enter my login data. But someone else (or me in a different situation) might have overlooked the URL check.