Using the HTML5 Fullscreen API for Phishing Attacks
  The user can hover their mouse over the link and their 
  status bar will show https://www.bankofamerica.com, as 
  expected.

Google search results use a similar technique to show you the "right" link when you hover.(It's only when you click the link does it muck around with the DOM to insert the google.com/... redirect link.)