2.
Watch out for fake websites.Look for the
"secure" and "https" markers before a website's URL in your browser. If they are not there, the website might be
fraudulent. Also, check for tiny dots under the letters in the url that could be mean the site is fake.

Https mean: Hyper Text Transfer Protocol Secure, if a site have it, that doesn't mean the site is legit and not fake, it simple mean the your connection with the site is private,
you can even get it for free, what you can do, is to check the Organisation that the certificate is Issued To.

Very true. You could get a free https certificate on sites like CloudFlare. The thing is though, most phishing sites don't even bother on getting an https certificate. So an exchange without a https certificate should automatically be a huge red flag.