mewgenics[.]app

Analysis of mewgenics.app, observed as offline at the time of review (July 25, 2026), indicates that the domain was registered through NiceNIC International Group Co., Limited on February 27, 2026. The authoritative nameservers are damon.ns.cloudflare.com and grace.ns.cloudflare.com, pointing to Cloudflare’s network. DNS resolution returns the IPv4 address 104.21.19.67, which belongs to AS13335 (Cloudflare, Inc.) and is geolocated to the United States. No TLS certificate is presented, confirming that HTTPS is not configured for the site. The page title returned from the host is "Mewgenics — Tactical Roguelike with Cats | Steam", suggesting that the domain may be attempting to impersonate or reference the Steam storefront for the game Mewgenics.

VirusTotal has recorded six detections out of ninety‑three scanners, and the domain appears on a single public blocklist. PhishDestroy has also listed the domain as blocked. No additional threat‑intel sources such as OTX or Google Safe Browsing were reported in the supplied data. Given the limited evidence, the primary confidence factor is the combination of a recent registration, use of Cloudflare infrastructure, lack of TLS, and the presence of multiple vendor detections.

The exact phishing payload or credential‑harvesting page has not been captured, so the specific tactics, techniques, and procedures remain unknown. The elevated risk rating aligns with the detection count and the presence on a phishing‑specific blocklist, reinforcing the recommendation for immediate remediation. Defenders should continue to block the domain at network perimeters, update DNS filtering rules to include the observed IP address and nameservers, and monitor for any resurgence of the host. Additional sandbox analysis of any retrieved HTTP content would be required to confirm the malicious functionality.