A Phishing example

Comments: In my GMail spam inbox. I carefully downloaded the attachment and viewed it in an HTML editor. Above images can be enlarged (click on). Note how official the second and third images look. This Phish "hook" is with Submit button (I put a red box around it). The fourth image is the actual code for that button.

The data collecting URL is:

zipprieidiiimoisprrnnmmnrkisiiaowiisrmrnmnrmnirnmn.zuprionaskoliliasnoxikcmrnmn.ru

Note the .ru ... that would a Russian domain suffix