Sophisticated phishing sites ask for your 2FA code right after your password and relay both to the real site instantly. Confirming you're on the genuine URL before typing any code defeats this real-time theft.
“A fake site will happily take your second factor too. Check the address.”