Using the HTML5 Fullscreen API for Phishing Attacks
<p><pre><code>  The user can hover their mouse over the link and their 
  status bar will show https://www.bankofamerica.com, as 
  expected.
</code></pre>
Google search results use a similar technique to show you the "right" link when you hover.<p>(It's only when you click the link does it muck around with the DOM to insert the google.com/... redirect link.)