The page probably has a script that, when the enter button is pressed, sends your session cookies, and if you have your Binance account open, they could clone your session..