Every Character Counts: From Vulnerability to Defense in Phishing Detection