It is furthermore super cool when a security sensitive web site/service has like 3 different url aliases for it that render the same looking page but for all I know could be phishing crap.