100-test-100[.]com

The domain 100-test-100.com was registered on 21 February 2026 through NiceNIC International Group Co., Limited. DNS resolution points to the IP address 104.21.36.147, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. The authoritative name servers are mimi.ns.cloudflare.com and west.ns.cloudflare.com, indicating that the infrastructure is hosted on Cloudflare’s edge network. No TLS certificate was presented during connection attempts, confirming the absence of HTTPS protection.

Content analysis identified the HTML title “Irreducible”, but no additional page content has been disclosed publicly. The site has been taken offline as of the report date, and the current HTTP status is unavailable. Threat intelligence platforms have flagged the domain as a generic phishing construct: PhishDestroy has added it to its blocklist, and the domain appears on a single external security blocklist. VirusTotal scanned the site and recorded two positive detections out of ninety‑three AV engines, reinforcing the suspicion of malicious intent.

The limited detection footprint and the short lifespan of the domain suggest a rapid‑deployment campaign, possibly leveraging Cloudflare’s free tier to obscure the true origin of the malicious payload. At present, the exact target brand or credential‑stealing mechanism remains unknown, and no malicious payload URLs or phishing templates have been recovered. Defenders should continue to block resolution of 100-test-100.com at network perimeter and DNS layers, monitor for any resurgence of the same IP address or Cloudflare name‑server pair, and incorporate the domain’s identifiers into threat‑intel feeds. Ongoing observation of the associated IP and ASN for future suspicious activity is recommended, as is periodic re‑scanning on VirusTotal to capture any changes in detection status.