Click on random websites: Many airdrop websites you see these days asking for personal details are fake and many of them are just clever ways to steal your private details and use it to steal your funds, be careful of the links you click and if possible, bookmark your sensitive websites (the ones that need private information like private keys and passwords) so that you wouldn't fall for a clone website.
this is very dangerous. Many phishing websites are specifically created to trap users and retrieve account information, private keys and others. If they get your rmail then they will send a link that will go to the phishing website. Must be very careful and thorough, bookmarking is indeed the best solution.