uxwvuponmlkjihgfedsummer-conference-2026[.]mario-s-event-organization[.]fullsailevents[.]com

This domain, uxwvuponmlkjihgfedsummer-conference-2026.mario-s-event-organization.fullsailevents.com, is identified as a generic phishing threat targeting users of event management platforms. Analysis indicates the domain mimics Full Sail Events, a legitimate conference and workshop management service, by presenting a fraudulent portal titled 'Full Sail Events - Complete Event Management Platform for Conferences & Workshops.' The page likely employs credential harvesting techniques, potentially integrated with payment processing infrastructure to capture both login details and financial data. No specific drainer kit signatures were confirmed, though the presence of Stripe integration suggests an attempt to legitimize financial transactions within the phishing workflow. Infrastructure analysis reveals the domain was registered through GoDaddy.com, LLC on February 21, 2026, and resolves to the IP address 143.198.30.146. Security vendor detection on VirusTotal stands at 3 out of 95, indicating limited but targeted identification by key security engines. The domain appears on three security blocklists and holds a Gridinsoft trust score of 0 out of 100, reflecting a complete lack of credibility. Additional technical indicators include the use of HTTP/3 and HSTS, which may have been implemented to enhance the illusion of legitimacy while evading certain detection mechanisms. The domain is currently blocked by MetaMask, SEAL, and PhishDestroy, further corroborating its malicious intent. As of the latest assessment, the domain has been taken offline, reducing immediate exposure to end users. However, the infrastructure remains a residual risk, particularly if the IP address or associated registrar accounts are reused for subsequent phishing campaigns. Organizations are advised to monitor for similar subdomain patterns under the fullsailevents.com parent domain and update blocklists to include the IP 143.198.30.146. Users who may have interacted with the domain should reset credentials on any associated accounts and review financial transactions for unauthorized activity. Continued vigilance is recommended, as threat actors often redeploy phishing infrastructure with minor modifications to evade detection.