utsvutsrqponmhgjedcfedcbupdate[.]zyxwvutonmlkjihgfedsummer-conference-2026[.]mario-s-event-organization[.]fullsailevents[.]com

The domain utsvutsrqponmhgjedcfedcbupdate.zyxwvutonmlkjihgfedsummer-conference-2026.mario-s-event-organization.fullsailevents.com has been identified as part of a credential theft campaign. This infrastructure impersonates Full Sail Events, a legitimate event management platform, to harvest user credentials under the guise of conference and workshop registration. The domain is currently offline, though prior activity suggests a targeted approach toward professionals in the events industry. Analysis indicates the domain resolves to the IP address 143.198.30.146 and was registered through GoDaddy.com, LLC on February 22, 2026. Detection metrics reveal elevated risk: four of ninety-five security vendors on VirusTotal flagged the domain, while three independent security blocklists have listed it. Additional indicators include a Gridinsoft trust score of 0/100, reinforcing the assessment of malicious intent. The page title, 'Full Sail Events - Complete Event Management Platform for Conferences & Workshops,' aligns with the impersonated brand, further confirming the credential theft objective. Current status confirms the domain has been taken offline, though similar campaigns may reemerge using comparable infrastructure. Organizations are advised to monitor for subdomain-based impersonation tactics, particularly those leveraging event-themed nomenclature. Network defenders should implement domain-based blocking for the identified IP (143.198.30.146) and scrutinize newly registered domains under the fullsailevents.com namespace. End users should verify the legitimacy of event registration portals through official channels before entering credentials.