Phishing kits from 2018 – why they don’t work anymore?

Just dug up an old "Elite Bank Phisher" kit (remember that shit?). Tried it for fun, and of course, Cloudflare + modern browsers kill it instantly. Back then, you could spoof SMS and even bypass 2FA on some weak banks. Now every site uses OTP apps or push notifications. Anyone still using phishing, or is it all about malware now?