This morning I've received several emails from a spoofed address requiring me to verify my domain contact information. When I click the link it brings me to a lookalike homepage. Do not enter your login here.
One of the best protections I am aware of is the LastPass add-on for most browsers. It will only log you in if the website is the same you registered your account. It's free too.
I also received those emails. It looks like they send out emails annually or something because I received those last year too (especially for NNNNN.coms).