Start with what the storefront is actually publishing.
A product, collection or content URL may publish a robots noindex directive in HTML or an HTTP header.
The signal becomes more suspicious when the page is also discoverable in a sitemap or otherwise looks like a normal indexable storefront entity.