The fact that you visit the correct URLs does not guarantee that you cannot get to a phishing site. Scammers can change the DNS of the server, as it was very recently with Galxe.com , and even earlier with the Myetherwallet wallet. This way you will come to the phishing site on your own.
Like I mentioned earlier, for better security, it is better to go for offline wallets or multisig wallet.
For my bitcoin wallet, for long term storage, it is on a multisig devices.
Going for wallet on an airgapped device, hardware wallet or other cold storage wallets for higher amount of bitcoin is advised. No matter how safe an online device is, it is not safe as offline devices and there could be a mistake at anytime.
So I was only referring to ways to avoid malware and hackers online. For wallet download, you can verify its PGP signature.