HTTPS matters, but a lock icon is not a reputation badge. TLS encrypts the connection, protects integrity and helps the browser verify that the server is authorised for the domain being visited.
What it does not prove
A phishing operator can register a deceptive domain and obtain a perfectly valid certificate for that domain. The certificate is not lying. The page is.
For login, payment or wallet pages, inspect the complete hostname rather than treating HTTPS as approval. If a URL is shortened or unfamiliar, Wenvo Tools can inspect its redirect chain before you open the destination:
Encryption is not anonymity
HTTPS hides much of the request and response content from intermediaries, but IP addresses, DNS behaviour and connection metadata can still reveal information about the service being contacted.