This is a very well designed scam. In addition to forging the address bar of your browser, it also uses a HTTPS session and a security certificate, so it has quite a serious chance in causing serious harm.

The email it propagates through is visually convincing:

Here, it is visible that the certificate owner is not 'keybank.com'.

Nevertheless, these clues are not plainly visible.

After the login screen, the main phishing page opens:

The status bar is also disabled (showing only a 'Keybank - Personal online banking' line), thus making the links' destinations not plainly visible. All the other concerns and clues from the previous screen apply here, too.

The site will accept any information, as soon as the card number entered has a 51-55 prefix (identifying a Mastercard CC number) which passes a basic verification formula - i.e. random bogus numers will not be accepted.

We have generated a number that passes this initial verification and gave it to the website (this is by no means a real CC number):

After this, the site leaves you with the only option of closing the browser window. This unloads the address bar forgery, too.

The WHOIS information of the initially linked domain could provide information on the scammer's identity: