The https isn't always the best indicator, phishing websites can have a valid SSL certificate. Instead, you need to look at the FULL URL you're visiting including the https, like https://steemit.com. Phishing sites will often trick you into something like https://steeemit.com.