It is an SSL certificate that simply encrypts your connection more securely from malicious attempts by third parties. Phishing sites are malicious efforts carried out by a second party, its the site owner. In fact, fake and phishing sites can also activate SSL certificates, this method does not protect you from phishing at all.

You have to manually type the url, or copy the url and then use "search with google" in the address bar. Genuine sites are usually indexed in the top search results (except ads).