None of the usual browser indicators of fraudulent websites are present in this method of phishing.
One of the best ways to tell if a website that is asking for your username and password is genuine or not is to look at the address bar in your browser that points to the site’s true origin. But sometimes that simple precaution isn’t enough.
A case in point is a dangerous phishing technique targeting Gmail users that first surfaced about one year ago but has begun gaining steam in recent weeks.
Source: Dark Reading