Nearly half of the phishing sites using SSL HTTPS connection and shows padlock indicates a means of telling it as a legitimate site. The reason for the alarming rise is because still the internet users believe in the padlock look for the lock and believe the website is legitimate and safe. The presence of SSL doesnt tell you anything about site legitimacy, the SSL/TLS certificates are to encrypt the connection between the browser and the server which avoids intrusion from hackers.”]
Source: https://gbhackers.com/half-phishing-sites-use-https/