I actually did search the second one to confirm it’s real, and the first is from a domain I know. I’ve gotten messages like the first, if I assumed they were all scams that would probably backfire.

I understand there is no way to 100% avoid being scams

That’s probably the point of this. If you ace it, it calls you paranoid and then tells you you can still get scammed.