The e-thieves seem to be interested only in the User ID and password, which they pilfer via login.php, and the memorable information they lift using login1.php script. Clicking any of the menu options will return a 404 Page Not Found message. The link does not lead to the e-banking portal, but to a collection of Web pages that employ several visual identification components of the original Web site, namely the bank logo (a bit blurry and disproportionately grotesqueresized) and the general formatting elements.”]
Source: https://www.bitdefender.com/blog/hotforsecurity/lloyds-tsb-on-line-credentials-sought-by-phishers/