An Innovative Phishing Style
Doesn't OAuth and similar work by redirecting you to the login page?I don't recall ever seeing a version that opens a popup to get you to login. This would immediately raise my suspicions on this basis (popup windows can be controlled by the opening website to a large degree!).