Filled with malware, phishing and scams, does the web need a safety manual?