In general they should use EV site wide rather than just login pages just to help confirm it is the correct legitimate website.