I should start by verifying the legitimacy of the website. Using domain registration tools like WHOIS could help. If it's a fake site, there might be red flags like recently registered domains or hidden registrant details. Also, checking if the site is reported on any scam or phishing databases like PhishTank or Google Safe Browsing.
