meowbrowser[.]testacc[.]online

Analysis of meowbrowser.testacc.online, observed on July 23 2026, indicates that the domain has been used for phishing activity. The site presented the page title “MeowBrowser” and was served over HTTPS using a Let’s Encrypt certificate issued in the current year (YR1). DNS resolution points to the IPv4 address 50.6.228.214, an address owned by Oracle Corporation in the United States. The domain is registered through Network Solutions, LLC and relies on two authoritative nameservers, ns1.server-814188.testacc.online and ns2.server-814188.testacc.online, which are consistent with the testacc.online naming pattern.

Infrastructure fingerprints reveal a mixed stack: the web server reports Apache HTTP Server, while application‑layer headers disclose Node.js and Express components, suggesting a custom backend rather than a simple static host. The domain appears on three independent security blocklists and is actively blocked by PhishDestroy, MetaMask, and the SEAL platform, reinforcing the conclusion that it is being leveraged for malicious credential collection. A Gridinsoft trust score of 0 / 100 further reflects a lack of reputation. VirusTotal has processed the domain with 91 scanning engines; none reported a detection at the time of analysis, but the absence of flags does not constitute evidence of safety, especially given the corroborating blocklist entries.

The site’s current status is offline, which may be the result of takedown actions or temporary suspension. While the available data confirms phishing usage, the specific target of the phishing campaign, the content of the landing page, and any credential‑harvesting mechanisms remain unverified because the site was not captured during the assessment. Consequently, defenders should continue to treat the domain as malicious, enforce network‑level blocks, monitor DNS queries for the associated IP address, and consider adding the domain to internal allow‑list exclusions.