3 ms·

Any security scanner product should also run the JS just like the real browser does. Otherwise cloaking the phishing page will be completely trivial.