Thank you for your advice, I will try to be careful at every pm that come in. Indeed phishing attacks lately increased , their attack targets are beginners who are new to crypto. So be beware of anyone.
Indeed, with most passwords managers you get the chance to store the url as well, so you can actually open the site FROM the password manager (which simply passes the argument to your browser).
Phishing attacks are on the wild, and people should be double careful. Also, never, ever repeat passwords, one more reason to use a password manager with a very good password to open it, preferably from a secured os/pc. Can't stress that enough, windows won't cut it. Go linux or bsd, that and the usual browser (ie. chrome) works for 90% of internet users out there.
A good password manager is not paid, and is NOT an online service, but a free and open source program you download, such as:
KeepassXC.
Do NOT use anything that requires you to login to an online site as password manager, much less something that demands a subscription fee.
Well sometimes beginners do not pay attention to the site domain, we need to educate the importance of user security. Moreover, hackers not only attack through PM, but they do spamming in e-mail, where it will be difficult to distinguish originals and fakes. If you sometimes forget to pay attention to the domain, it's better to use an antivirus that has browser security features such as avast, Kaspersky, McAfee, etc. Maybe it will help a little when we are careless.