This is another reason why using password managers is good. I let it auto fill, so if I got redirected to a bad domain, it wouldn't autofill, and I'd double-check the domain.