vs2-epq[.]pages[.]dev

As of July 24, 2026, the domain vs2-epq.pages.dev has been confirmed as a credential phishing site. The domain was registered through Cloudflare, Inc. on February 21, 2026. Infrastructure analysis reveals that the domain resolves to an IP address (172.66.47.167) located in the United States and is hosted by Cloudflare, Inc. (AS13335). The site is currently offline, which may indicate that it has been taken down following its detection and reporting.

However, the domain has been flagged by 14 of 93 security vendors on VirusTotal, suggesting that it was previously active and used for malicious purposes. The domain also appears on one security blocklist and is blocked by PhishDestroy, further corroborating its malicious nature. The Gridinsoft trust score for this domain is 0 out of 100, indicating a complete lack of trustworthiness. The SSL certificate is issued by Google Trust Services / WE1, which is a common practice for legitimate and malicious sites alike.

The page title 'Suspected phishing site | Cloudflare' suggests that the domain was identified as potentially harmful at some point. Defenders should treat this domain as a confirmed credential phishing site and ensure that it is blocked in all network and endpoint security configurations. Additionally, any interactions with this domain should be thoroughly investigated, and affected users should be alerted and advised to change their credentials if they provided sensitive information. Regular monitoring and updating of blocklists are recommended to stay ahead of any potential reactivation of the domain.