srqtonmlkjihgfedsummer-conference-2026[.]mario-s-event-organization[.]fullsailevents[.]com

This domain is flagged as an elevated-risk credential theft phishing site targeting users of event management platforms. Analysis indicates the infrastructure was designed to harvest login credentials, payment details, or other sensitive information under the guise of a conference registration portal. The page title, 'Full Sail Events - Complete Event Management Platform for Conferences & Workshops,' suggests an attempt to impersonate a legitimate event organization service, increasing the likelihood of successful social engineering attacks. Infrastructure analysis reveals the domain was registered on February 21, 2026, through GoDaddy.com, LLC, and resolves to IP address 143.198.30.146. Security vendors on VirusTotal flagged the domain at a rate of 2/95, while Gridinsoft assigned a trust score of 0/100. The domain appears on three security blocklists and has been blocked by multiple threat intelligence feeds. Technologies detected include Stripe for payment processing, HSTS for enforced HTTPS connections, and HTTP/3 for improved performance—all of which are commonly exploited to lend credibility to phishing sites. Mitigation steps for organizations and users include blocking the domain and its associated IP at the network level, particularly in environments where event registration or conference planning tools are used. Security teams should monitor for credential reuse attempts stemming from this campaign, as harvested data may be leveraged in follow-on attacks. End users should be educated to verify domain legitimacy before entering credentials, especially when prompted by unsolicited event invitations or payment requests. If Stripe or similar payment processors are detected on suspicious domains, financial teams should be alerted to potential fraudulent transactions.