its look like a very generic question... you had to use the same cautious you have with any kind of website.
of course a quick search about the previous scam/user opinion could be helpful.
A double check of urls can't be enough if you don't understand the action are you doing by signing a transaction... this can grant privileges that you don't want to provide for.
related in the specific case of a bitcoin website, the only thing that you need more as extra cautious would be a "segregation" of keys (keeping offline and physical stored) that allow you to interact (aka "sign") transaction or messages with a certain website.
You can feel this way, but I believe newbies can ask anything because they are trying to increase their knowledge and want to use precautions before having any damage. Recently, due to AI, things are getting worse, and it's never been easy for everyone to have all related stuff. Members like you can give good information and guidelines because it's important to stay safe during a journey into crypto, which has never been easy for everyone.
I am also reading and trying to understand offline things because these could be helpful and always give better security. It's going to take time, but I am sure things will be improved in the near future, and people will be well aware of these phishing attacks or scam sites that are hurting them.