One concrete data point for the thread. Red flags, in rough order of how much they should worry you: no verifiable address, no batch numbers, prices far under market, vendor-commissioned tests only, pressure toward irreversible payment, and shipping with no temperature control.
Worth separating that from vendor vetting, which this thread keeps folding into the same question. They behave differently and the advice does not transfer.