Best practice: never fill your password without checking if the address in your browser matches the one of your Cozy.