You can clearly see the overwriting window 'overlapping' the open dialog, and the real URL in the properties page.

The next phish displayed is the one demanding CC information. As far as the URL and the address bar go, the situation is unchanged:

The phish site will not check the information entered - it will accept anything.

A standard-looking logout screen follows:

Soon after it, the browser gets redirected to the legitimate suntrust site.

As a recapitulation - having in mind the convincing phish message and the address bar spoof, this could be considered a dangerous phish. A sharp lookout for the details is necessary in order to avoid being phished.. Another flaw of the scam is that it does not replicate the legitimate site's security sertificate, and this shows in the broser window (the padlock icon in the status bar, marking a secure HTTPS session, is not present)