For sites you're unsure about, search on this forum to make sure whatever exchange or service you are using is legitimate. I search on Google using the format "(Site Name) Bitcointalk" to find threads and posts from this forum, and clicking on a few threads from the results you find typically help out in deciding whether a service or exchange is legit or not.
If you're unsure how old a site is, doing a Whois search of the website can reveal when the domain was registered. Many scam websites have very recently registered domains and/or hidden whois information, and either of these is a huge red flag most of the time.
What about the cases where there are dangerous phishing apps or fake wallets on legit online stores?
Here is the proof below:
https://thenextweb.com/hardfork/2018/11/14/google-play-fake-cryptocurrency-wallets/