Beware: new sophisticated Gmail phishing attacks

...

This page looks like Google's Gmail login page, and the only indication that something is wrong comes from the address field.

It does not begin with https://accounts.google.com/, but with data:text/html. Also, since the page is not HTTPS, you don't get a green or red indicator either. 

...

In short, if the URL does not start with https:// it is definitely fake, at least in the case of Gmail and any modern service that supports https://.