There are and you mentioned one: favourites. Favourite or bookmarks do exactly what you want. But I suppose that you feel that there is a problem with that as a solution, and there is.
The problem has to do with the balance of security and convenience. You want something that is effective but does not reduce your ability to do what you want. A solution has to provide clear information, but not be in the way. You would quickly uninstall a plugin that showed a banner on every website that was not in your trusted list. You also do not want something that the user will easily overlook. So it has to be out of the way until it becomes relevant. Knowing when to be relevant is a massive problem to solve.
Here is what has been tried and is available even today:
Before password managers, the advice was to bookmark the sites you went to and to check for the star before you entered a password. This was about as successful as you would imagine (not very). It required that people voluntarily remembered to check before entering passwords.
Browsers themselves had built-in tools, like IE's "Trusted Sites" list. It displayed an icon in the bar. But that had the same problem: it required that users check for the icon.
TLS certificates used to be expensive so the advice for a long time was "if you see the green lock in the URL bar, then you know it is trusted". This was fine until certificates became free and, like favourites, it required the user to voluntarily check for the lock. Malicious actors would also leverage valid sites using TLS to host their malicious pages (or use Google Docs).
Then, in the corporate environment, there were whitelists. This was extremely successful to prevent phishing, but awful in terms of employee happiness. You can still get browser extensions that use the whitelist idea.
Then there were the "reputation circles" and other reputation-based methods. A browser extension allowed users from around the world to rate sites. This was much better than whitelisting, but then malicious actors poisoned the ranking system and allowed malicious sites to be trusted.
To improve on that, DNS services used their info to provide reputation services, and there are many used today. You can get these DNS reputation plugins for any browser. The problem here is that it is up to the DNS provider to recognize and rate a site appropriately. Malicious actors are actively finding ways to evade their algorithms.
Password manager plug-ins are the best way to protect yourself from this problem, and it is not a "hack" but a defined feature of browser-based password managers. You set a password that you cannot remember yourself, you get the password manager to do it for you, and if it doesn't, you do not just know that something is wrong, but you are prevented from entering the data that you do not know. Offline password managers cannot do this for you.
An online, in-browser password manager is completely out of the way until the very point where it is needed. It is unobtrusive, and provides a barrier that is difficult to get past without a lot of effort. It defines the list of relevant, trusted sites, and offers both convenience and security. That's why they are so highly recommended, especially for non-technical users.