Pretty nice demo. The fullscreen notification can be fake with either bankofarnerica.com or http://en.wikipedia.org/wiki/IDN_homograph_attack.