If you’re especially cautious — or especially paranoid — you can bypass the bank statements entirely by paying with a gift card or a cash, check, or money order (available only to users in the U.S.).
With the online service URL Void, you can check whether a website is dangerous. Simply enter the URL, run a scan, and review the results from various security sources.