Almost three-quarters of all phishing sites now use SSL protection, so users can’t rely on SSL alone to evaluate whether a site is safe or not.