uxwvutsrqponmhgfedsummer-conference-2026[.]mario-s-event-organization[.]fullsailevents[.]com

This domain, uxwvutsrqponmhgfedsummer-conference-2026.mario-s-event-organization.fullsailevents.com, is identified as a generic phishing threat impersonating the Full Sail Events brand. Analysis indicates the infrastructure was designed to mimic a legitimate event management platform, likely targeting conference or workshop attendees with fake login portals or credential harvesting forms. The page title, 'Full Sail Events - Complete Event Management Platform for Conferences & Workshops,' aligns with typical brand impersonation tactics, though no direct evidence of a crypto drainer kit or payment skimming was observed in the available data. Infrastructure analysis reveals the domain resolves to IP address 143.198.30.146 and was registered through GoDaddy.com, LLC on February 21, 2026. VirusTotal reports 2 out of 95 security vendors flagging the domain as malicious, while Gridinsoft assigns a trust score of 0/100. The domain appears on three security blocklists and is actively blocked by MetaMask, SEAL, and PhishDestroy. Detected technologies include Stripe integration, HSTS enforcement, and HTTP/3 support, suggesting an attempt to appear legitimate while facilitating fraudulent transactions or data collection. The domain is currently offline, reducing immediate risk to end users. However, the infrastructure may resurface under a different subdomain or IP address, given the elevated risk level. Organizations should monitor for similar patterns, including newly registered domains impersonating event management platforms, and update blocklists accordingly. Users who interacted with the domain should verify account integrity and reset credentials for any associated services. Remaining risk includes potential reuse of collected credentials or payment details in follow-up attacks.