Search engines are useful for research, but sensitive account access deserves a higher level of verification than an ordinary informational search.
A promoted placement does not automatically prove official ownership.
Small spelling changes or extra words can produce a convincing but unrelated address.
A title and description can look familiar while the destination domain is different.
Once the official address is confirmed, use a trusted bookmark or company portal.
Use the search engine's reporting tools and the institution's official security channel.
