DHL Phishing

From a recent comment on another DHL Phishing.

http://ninth.rit.se/html/cfg/wp-content/DHL_International/DHL_Tracking.htm

Analysis :

During analysis, I observed another phishing page :

NOTE : http://ninth.rit.se/html/cfg/wp-content/DHLGLOBALMAIL/DHL_Tracking.htm

rit.se whois :

state: active
domain: rit.se
holder: pinswe1201-00001
admin-c: -
tech-c: -
billing-c: -
created: 1996-05-21
modified: 2014-06-05
expires: 2015-12-31
transferred: 2013-01-15
nserver: ns3.pin.se
nserver: ns2.pin.se
nserver: ns1.pin.se
dnssec: unsigned delegation
status: ok
registrar: PIN Sweden AB