When using "paste" in the 2FA dialog, you get other people's data pasted. I never put that URL (or what I had previously - part of a conversation) into the paste buffer.
That's very bad!