mponmhgfedsummer-conference-2026[.]mario-s-event-organization[.]fullsailevents[.]com

This domain, mponmhgfedsummer-conference-2026.mario-s-event-organization.fullsailevents.com, is flagged as a credential theft phishing site targeting users of event management platforms. Analysis indicates the domain mimics legitimate conference and workshop registration portals, likely harvesting login credentials, payment details, or personal data under the guise of event sign-ups. The page title, 'Full Sail Events - Complete Event Management Platform for Conferences & Workshops,' aligns with common branding used by professional event organizers, increasing the likelihood of successful social engineering attacks against attendees or organizers. Infrastructure analysis reveals the domain was registered on February 21, 2026, through GoDaddy.com, LLC, and resolves to the IP address 143.198.30.146. Detection metrics show 2 out of 95 security vendors on VirusTotal flagged the domain as malicious, while it appears on 3 distinct security blocklists. Technologies detected include Stripe for payment processing, HSTS for enforced HTTPS connections, and HTTP/3, suggesting the attackers invested in mimicking legitimate site functionality to evade suspicion and prolong the campaign's effectiveness. Users who visited this domain should immediately revoke any credentials entered, particularly those used for event registrations, financial transactions, or administrative access. Monitor accounts linked to the site for unauthorized activity, including changes to registration details or unexpected charges. If payment information was submitted, contact financial institutions to dispute fraudulent transactions and request card replacements. Security teams should block the domain and its resolving IP (143.198.30.146) across network defenses to prevent further exposure. Given the domain's elevated risk level and offline status, affected parties should remain vigilant for follow-up phishing attempts via email or other channels.