nmlkjiwww[.]dsummer-conference-2026[.]mario-s-event-organization[.]fullsailevents[.]com

This domain, nmlkjiwww.dsummer-conference-2026.mario-s-event-organization.fullsailevents.com, poses a credential theft threat through brand impersonation of Full Sail Events, a legitimate event management platform. Analysis indicates the site was designed to harvest login credentials, payment details, or other sensitive information by mimicking the authentic Full Sail Events interface, as evidenced by the page title 'Full Sail Events - Complete Event Management Platform for Conferences & Workshops.' The inclusion of technologies such as Stripe suggests an attempt to appear legitimate while potentially intercepting financial data submitted by victims. Infrastructure analysis reveals the domain was registered on February 21, 2026, through GoDaddy.com, LLC, and resolves to the IP address 143.198.30.146. It has been flagged by 2 out of 95 security vendors on VirusTotal, indicating limited but confirmed detection. The domain appears on three security blocklists and is assigned a trust score of 0/100 by Gridinsoft, further corroborating its malicious nature. The use of HSTS and HTTP/3 may have been intended to enhance the site's perceived legitimacy while evading basic detection mechanisms. Users who visited this domain should immediately revoke any credentials entered on the site and monitor associated accounts for unauthorized activity. If payment details were submitted, affected parties should contact their financial institutions to report potential fraud and request transaction monitoring. Additionally, affected systems should be scanned for malware or unauthorized access, as credential theft sites may deploy secondary payloads. Organizations should update blocklists to include this domain and its associated IP address to prevent further exposure.