There is a security bug in Microsoft Internet Explorer, which allows to show any faked target-address in the status bar of the window. Tested in Microsoft Internet Explorer 6 SP1 (6.0.2800.1106) with all patches installed on Windows 98.
07bc6af07060fd1c49b121465a16289a56c53c4e7ac151fd1697434a5d9e16ff