Analysis of epicrush.info indicates this domain is actively engaged in generic phishing activity as of July 28, 2026. The domain resolves to IP address 172.67.139.226, a Cloudflare-hosted endpoint that has been associated with multiple confirmed phishing campaigns. Infrastructure review shows the domain was registered on April 14, 2026, through registrar Global Domain Group LLC, with nameservers grace.ns.cloudflare.com and rene.ns.cloudflare.com, suggesting Cloudflare as both DNS provider and potential traffic proxy.
Detection metrics reveal the domain appears on two independent security blocklists and is blocked by PhishDestroy and OpenPhish, two specialized anti-phishing services. VirusTotal scanning reports 14 of 91 security vendors flagging the domain as malicious, providing cross-vendor confirmation of phishing characteristics. No specific brand impersonation or targeted scam category is identified in available metadata; the exact content served by the domain remains unanalyzed.
Defenders should treat this domain as high-risk and implement blocking at both DNS and network perimeter levels. The continued resolution of the domain and absence of takedown action from the registrar or hosting provider indicate ongoing operational status. Organizations are advised to monitor related Cloudflare IP ranges for similar activity, given the infrastructure reuse patterns observed in this campaign.