I believe the best way to stay safe from any malware or phishing site is to never download anything that they force you to do. But in case you feel, the download is important then make sure to do an online virus total scan of the attachment before downloading it. I usually follow the same tips when it comes to online security.