you have to understand, if someone was sophisticated enough to install malware onto your computer through javascript, they wouldn't be wasting their exploit on some random backwoods phishing website. this isn't the 00s anymore where you click on a link and you get a bunch of pop-ups that don't go away, or something automatically starts downloading. the odds of running into a javascript 0-day on the clearnet are 0.001%. as long as you don't download shit, or give away your information, you have nothing to fear by clicking on a link, well besides giving somebody your IP, but it's easy to change or mask that.