zupdate[.]vuponmlkjihgfedsummer-conference-2026[.]mario-s-event-organization[.]fullsailevents[.]com

This domain, zupdate.vuponmlkjihgfedsummer-conference-2026.mario-s-event-organization.fullsailevents.com, is identified as an elevated-risk credential phishing threat targeting users of event management platforms. Analysis indicates the domain impersonates Full Sail Events, a legitimate conference and workshop management service, likely to harvest login credentials or payment details. No specific drainer kit signatures were detected, but the subdomain structure and page title suggest a targeted campaign against attendees or organizers of future events, particularly those associated with the fabricated 'Summer Conference 2026.' Infrastructure analysis reveals the domain was registered on February 21, 2026, through GoDaddy.com, LLC, and resolves to the IP address 143.198.30.146. Detection metrics show a VirusTotal score of 2/95 security vendors flagging the domain as malicious. The domain appears on three security blocklists and is actively blocked by MetaMask, SEAL, and PhishDestroy. Gridinsoft assigns a trust score of 0/100, further confirming its malicious classification. Technologies detected include Stripe integration, HSTS, and HTTP/3, which may be used to lend credibility to the phishing page or facilitate fraudulent transactions. As of the latest assessment, the domain has been taken offline, reducing immediate exposure to users. However, the infrastructure remains registered, and similar domains may emerge using comparable naming conventions or registrar services. Organizations and individuals are advised to monitor for related subdomains, enforce blocklisting of the identified IP, and verify the legitimacy of event-related communications through official channels. Remaining risk includes potential reuse of the infrastructure or migration of the phishing kit to a new domain.