That's correct - it's not a phishing site. It's totally fine to put your password in as long as you are at the correct SR url! (silkroadvb5piz3r.onion) Or you can simply refresh the page until the normal length captcha appears.