The system would be working if it was an actual phishing page.
If it is an example, which is non-malicious, and even says "Don’t enter your password", and doesn’t even store the data from the input fields, it’s not.
It could easily check if any JS is executed, or if the form fields ever get sent anywhere (both is not the case).
