ojihgfedsummer-conference-2026[.]mario-s-event-organization[.]fullsailevents[.]com

This domain is flagged as an elevated-risk generic credential phishing threat targeting event registration and payment portals. Analysis indicates the infrastructure was designed to mimic legitimate conference management platforms, likely to harvest login credentials, payment details, or personal data under the guise of event registration. The specific threat type—generic credential phishing—suggests broad targeting rather than a campaign tailored to a single organization, increasing the potential impact across multiple sectors. Infrastructure analysis reveals the domain ojihgfedsummer-conference-2026.mario-s-event-organization.fullsailevents.com was registered on February 21, 2026, through GoDaddy.com, LLC. It resolves to the IP address 143.198.30.146 and is currently offline. Detection metrics show 3 out of 95 security vendors on VirusTotal flagged the domain, while it appears on three security blocklists. Additional indicators include a Gridinsoft trust score of 0/100, with technologies such as Stripe, HSTS, and HTTP/3 detected, which may have been employed to lend credibility to the fraudulent payment and registration workflows. The page title, 'Full Sail Events - Complete Event Management Platform for Conferences & Workshops,' aligns with the observed tactic of impersonating event management services. Mitigation against this generic credential phishing threat requires a multi-layered approach. Organizations should enforce domain-based filtering to block subdomains mimicking legitimate event platforms, particularly those registered through high-volume registrars like GoDaddy. Network-level protections should include monitoring for connections to the IP 143.198.30.146 and similar infrastructure. Endpoint detection rules should prioritize domains created within the last 90 days that exhibit payment processing technologies (e.g., Stripe) without corresponding legitimate business verification. User awareness training should emphasize verifying event registration portals through official channels, especially when encountering domains with unusual subdomain structures or recent creation dates. Incident response teams should treat any interaction with this domain as a potential credential compromise and initiate password resets for affected accounts.