pathslogix[.]com

On 22 July 2026 analysts observed that the domain pathslogix.com resolves to the IPv4 address 107.173.193.235, hosted by AS36352 belonging to HostPapa in the United States. The domain was registered on 14 July 2025 through Global Domain Group LLC and uses the authoritative name servers ns5.elitecloudserver.com and ns6.elitecloudserver.com. No TLS certificate is presented, indicating the site is served over plain HTTP. The page title returned by the server, “Path Logix - Global Logistics International Shipping,” does not reference the targeted brand, but the domain is flagged as a brand‑impersonation campaign targeting x.com and is classified as credential phishing. The infrastructure has been listed on a single security blocklist and is currently blocked by the PhishDestroy feed.

VirusTotal analysis shows a single positive detection out of 95 scanned vendors. Gridinsoft assigned a trust score of 0 out of 100, further confirming the malicious disposition. The domain is presently offline, which may be a temporary takedown or a deliberate shutdown after a campaign phase. Evidence indicates that the adversary leveraged a legitimate‑sounding logistics brand to lure victims into disclosing credentials for x.com, although the exact phishing page content has not been publicly released.

The lack of an SSL certificate, combined with a low trust score and the presence on a blocklist, suggests a high likelihood of malicious intent. Defenders should continue to block the domain and the associated IP address at perimeter and endpoint layers, monitor the hosting provider for new domains using the same name servers, and update URL filtering rules to include pathslogix.com. Additional threat‑intel sources should be consulted for any emerging indicators, and any future requests to the domain should be logged for forensic correlation.