rutsrqpkjihgfedsummer-conference-2026[.]mario-s-event-organization[.]fullsailevents[.]com

The domain rutsrqpkjihgfedsummer-conference-2026.mario-s-event-organization.fullsailevents.com is identified as an elevated-risk generic credential phishing threat targeting event management platforms. Analysis indicates the domain impersonates Full Sail Events, a legitimate conference and workshop management service, to harvest user credentials or financial data. The domain is currently offline, though prior activity suggests it was operational for phishing campaigns. Infrastructure analysis reveals the domain was registered on February 21, 2026, through GoDaddy.com, LLC, and resolved to IP address 143.198.30.146. It is flagged by 4 of 95 security vendors on VirusTotal and appears on 3 security blocklists. Additional indicators include a Gridinsoft trust score of 0/100 and detection by multiple phishing mitigation systems. Technologies detected on the domain include Stripe for payment processing, HSTS for security enforcement, and HTTP/3 for modern web protocols, which may have been leveraged to appear legitimate while facilitating fraudulent transactions. Current status confirms the domain has been taken offline, reducing immediate risk to users. However, the infrastructure remains a potential vector for future phishing activity. Organizations and individuals are advised to block the domain and associated IP at the network level, monitor for similar subdomain patterns (e.g., randomized strings preceding event-related terms), and verify payment or credential requests through official channels only. Security teams should prioritize reviewing logs for connections to 143.198.30.146 and alert users who may have interacted with the domain prior to its deactivation.