So should we use the "pretty sure" metric of the domain name matching the product we are searching for? What makes this site more "legit" than others?

Nasdaq:DSCM

It seems to me a $200M company offering to sell a product to you via their website would seem more legit than, say, a site you're redirected to after someone hacked some .edu account. (At this moment, the second result on Google for buy viagra appears is a link to www.engineering.uga.edu, but that redirects to some pharmacy site if you click through from Google (but not if you load directly).)

So yes, I'd say there's at least some way to compare the legitimacy here.