hase[.]memedex[.]club

Analysis of the domain hase.memedex.club indicates it was actively involved in a cryptocurrency airdrop phishing campaign, as evidenced by its page title 'The Forgotten Rabbit Airdrop' and classification as a crypto scam by security vendors. The domain was registered on February 27, 2026, through Global Domain Group LLC and utilized Cloudflare nameservers (amy.ns.cloudflare.com and kai.ns.cloudflare.com), a common infrastructure choice for phishing sites seeking to obscure hosting origins. It resolved to the IP address 188.114.96.3, associated with AS13335 (Cloudflare, Inc.) in the United States, though this IP is part of a shared hosting environment and does not inherently confirm malicious intent without additional context. At the time of assessment, the domain was flagged by two of 93 security vendors on VirusTotal, a relatively low detection rate that may reflect either limited exposure or evasion techniques.

It appeared on two security blocklists and was actively blocked by PhishDestroy and ScamSniffer, indicating recognition by specialized anti-phishing tools. The absence of an SSL certificate is notable, as modern phishing sites typically employ encryption to appear legitimate; its omission here may suggest rapid deployment or oversight by the threat actor. The domain has since been taken offline, though its prior activity and infrastructure choices remain relevant for retrospective analysis. Defenders should treat this domain as part of a broader pattern of airdrop-themed crypto scams, particularly those leveraging Cloudflare for anonymity.

The registration details, including the registrar and creation date, provide potential pivot points for identifying related campaigns. While the exact content of the phishing page is not analyzed here, the page title and scam classification strongly suggest an attempt to deceive users into divulging cryptocurrency wallet credentials or transferring funds under false pretenses.