gfidsummer-conference-2026[.]mario-s-event-organization[.]fullsailevents[.]com

PhishDestroy has identified a sophisticated generic phishing domain operating under the guise of a legitimate event management platform. The domain gfidsummer-conference-2026.mario-s-event-organization.fullsailevents.com impersonates Full Sail Events, a complete event management platform for conferences and workshops, in an attempt to harvest login credentials and personal information from unsuspecting users. This particular threat is categorized as a credential harvesting scam, where the attacker aims to trick victims into entering sensitive data such as email addresses, passwords, and potentially financial details under the pretense of registering for a conference or workshop. The domain's deceptive nature is further underscored by its lack of an SSL certificate, which would normally indicate a secure connection, making it easier for attackers to intercept any data submitted.

Technical indicators paint a clear picture of malicious intent. VirusTotal analysis shows that 2 out of 95 security vendors flag this domain as malicious, a significant red flag given the broad consensus among security tools. The domain was registered through GoDaddy.com, LLC, a popular registrar often abused by threat actors, and was created on February 21, 2026, a very recent date that aligns with typical phishing campaign lifecycles. Furthermore, the domain resolves to IP address 143.198.30.146 and appears on 3 security blocklists, confirming its association with known malicious activity. The current status indicates the domain has been taken offline, likely due to reports from security researchers or hosting provider intervention, but similar domains may resurface under different subdomains.

Users who have visited this domain or entered any information should take immediate action. Change any passwords used on the site, enable two-factor authentication on all accounts, and monitor financial statements for suspicious activity. Run a full antivirus scan on any device used to access the domain. PhishDestroy recommends that users always verify event registration pages by contacting the organization directly through official channels. For any further concerns, report the incident to local cybersecurity authorities and share the domain details with PhishDestroy to help protect others from this evolving threat.