The article does provide a test to distinguish authentic login pages from ones spoofed via CSS: >Genuine OAuth or payment windows are in fact separate browser

The article does provide a test to distinguish authentic login pages from ones spoofed via CSS: >Genuine OAuth or payment windows are in fact separate browser instances that are distinct from the primary page. That means a user can resize them and move them anywhere on the monitor, including outside the primary window.