In case anyone missed it, if you have ANY doubts about the 'integrity' of a web page, paste this into your address bar:
javascript:alert("The actual URL is:\t\t" + location.protocol + "//" + location.hostname + "/" + "\nThe address URL is:\t\t" + location.href + "\n" + "\nIf the server names do not match, this may be a spoof.");