This page used window.opener.location to replace your original tab with a phishing login.
window.opener.location
In this demo, the parent tab shows a simulated phishing redirect message.