it might redirect to a malicious web page, but https would still prevent a problem. perhaps read the article you posted.
This will seem like a valid website, especially if the phishing site is done well. Not just non-technical users, I'd wager some tech familiar users would be fooled too.
The focus always being on the lock icon might not always cover it.
Safari will prevent this though.