Technical signals
Is the site encrypted end to end? How long has the domain existed? Where is it hosted? Where does it redirect to? A three-week-old domain with no history that redirects elsewhere at checkout is a strong signal.
- Certificate and encryption on sensitive pages
- Domain age and ownership history
- Unexpected redirects between browsing and payment