Quick answer
Trustworthiness is assessed by combining signals: identity, domain, context, payment method, pressure, consistency and independent verification. One positive clue — such as HTTPS, followers or a logo — is not enough to make something safe.