It wasn't a phishing site, Wired. It was a site designed to point out that their approach is susceptible to phishing. Entering data in the form gave you a scolding.
> The Equifax Breach Exposes America's Identity Crisis When asked by multiple lawmakers why Equifax set up this separate site, Smith said that the company's main domain was not architected to process the enormous traffic the company knew would come its way after the announcement. In all, Smith said the independent breach response site has had 400 million consumer visits, which would have crumpled the main site.
They could have done a subdomain and pointed it at the site.