101x[.]info

Analysis of the domain 101x.info indicates it is an active phishing endpoint targeting German-speaking users. The domain was registered on February 21, 2026, through Tucows Domains Inc. and currently resolves to the IP address 104.21.28.214, which is part of AS13335 (Cloudflare, Inc.) in the United States. The page title 'Nur einen Moment…' suggests a temporary holding or redirection page, commonly used in phishing campaigns to obscure the final malicious destination or to filter traffic. Infrastructure analysis reveals the use of Cloudflare nameservers (jill.ns.cloudflare.com and henry.ns.cloudflare.com) and an SSL certificate issued by Google Trust Services (WE1), which are frequently leveraged to mask the true hosting provider and enhance perceived legitimacy. The domain is flagged on two security blocklists, including PhishDestroy and ScamSniffer, and is listed in one AlienVault OTX threat intelligence pulse. Detection engines on VirusTotal report that 7 out of 93 security vendors classify this domain as malicious, though the specific nature of the phishing content remains unconfirmed due to the lack of deeper forensic analysis. The domain remains operational as of July 12, 2026, with an HTTP 200 status code, indicating active hosting. Defenders are advised to treat this domain as high-risk and implement blocking measures at the DNS or network level. Further investigation into associated payloads or redirection chains is recommended to determine the exact phishing methodology and potential brand impersonation, though no specific brand or scam type has been confirmed from the available data.