Data by urlscan.io opens in a new tab

Phishing is a product these days. Someone else writes the login page, keeps the branding current, handles the anti-bot check and the code prompt, and rents the whole thing out. The customer brings a domain and a mailing list. That is why the same page turns up on thousands of hosts with nothing changed but the logo, and why burning one domain costs whoever is running it almost nothing.