Keep in mind that not all browsers support status bar masking and of course anyone who turns off javascript could see the URL there. (Not to mention, they could just "View Source" to see it.) :)
Psychopsia
8:36 pm on Aug 31, 2006 (gmt 0)
Also, I think this is bad because maybe the webmaster is trying to hide you a dangerous website, masking with another.