Confirm the network and address. Then inspect contract authorities, the ability to increase supply or freeze accounts, holder concentration, liquidity and pair history.
Use caution when a site pushes a signature, promises guaranteed returns, hides the address or impersonates a brand. Take wallet warnings seriously. No warning is not a certificate.
Holder distribution needs context. A pool, burn address, exchange or bridge can resemble a large holder. A risk scan starts an investigation, it does not end one.