The run a website which serves you the password prompt.

Do you inspect this source code every single time you login?