How you can know if the composing provider web page is legit?