Legitimate sites often have consistent branding and secure "HTTPS" connections. A missing padlock icon in your browser's address bar is a common red flag.