You can combine this with a redirect to something like `http://mail.googlemaillogin.com/` which will fool a lot of people

I think the wrong URL is the biggest indicator that something isn't right - and to think that several months ago, there was quite a bit of activity around removing URLs from browsers completely...