excesslogworld[.]online[.]fastlanex[.]pro

The domain excesslogworld.online.fastlanex.pro was registered on February 21, 2026 and is currently taken offline. Technical analysis shows that the site served a page titled "Excess Logistics Courier Service | Homepage," which does not reference Google directly, yet the domain is catalogued as a Google brand impersonation. The hosting server resolves to IP address 192.3.141.252, located in the United States and assigned to AS36352 (HostPapa). The SSL certificate in use is identified as R10, indicating a standard certificate without extended validation.

Security telemetry indicates that nine of ninety-three VirusTotal scanners flagged the domain, and the site appears on a single external security blocklist. Gridinsoft assigned a trust score of zero out of one hundred, reflecting a high confidence of malicious intent. The domain was also blocked by the PhishDestroy mitigation platform, confirming that it was recognized as a phishing vector before being taken offline. The scam type is recorded as a Tech Support Scam, suggesting that any payload or social engineering content would likely involve fraudulent technical assistance offers.

While the page title and host information provide concrete indicators, the actual content of the landing page, login forms, or credential harvesting mechanisms have not been publicly disclosed, leaving the precise attack flow uncertain. Defenders should continue to block the domain and its associated IP address at perimeter defenses, monitor for any re‑registration attempts, and add the host to URL filtering and email security policies. Threat intelligence feeds should be updated to reflect the offline status while retaining historical indicators for correlation with future campaigns that may reuse the same hosting infrastructure or certificate profile.