Seems a quite targeted attack though, the phishing domain is registered just 4 days ago.