Sure, but you would have needed to input a password first, which autofill wouldn't have put into a spoofed site