xwzytsrqponmlkjihgfedsummer-conference-2026[.]mario-s-event-organization[.]fullsailevents[.]com

Analysis of the domain xwzytsrqponmlkjihgfedsummer-conference-2026.mario-s-event-organization.fullsailevents.com indicates an elevated-risk generic phishing threat. The domain, registered on February 21, 2026, through GoDaddy.com, LLC, is currently offline but was previously active under nameservers leia.ns.cloudflare.com and quentin.ns.cloudflare.com, resolving to IP 143.198.30.146 (AS14061, DigitalOcean, LLC, US). No SSL certificate was detected, increasing susceptibility to interception or manipulation. The page title, 'Full Sail Events - Complete Event Management Platform for Conferences & Workshops,' suggests an attempt to impersonate a legitimate event management service, though no confirmed brand association or targeted scam type has been established beyond this generic classification.

Infrastructure analysis reveals the use of Stripe, HSTS, and HTTP/3, which may indicate an effort to appear technically legitimate. Detection data shows the domain is flagged by three security blocklists—PhishDestroy, MetaMask, and SEAL—while Gridinsoft assigns a trust score of 0/100. Two of 93 security vendors on VirusTotal flagged the domain at the time of scanning. Defenders should note that the domain's creation date, lack of SSL, and hosting on a cloud provider commonly exploited for phishing campaigns align with patterns observed in credential harvesting or fraudulent service impersonation.

Given the domain's current offline status, further forensic analysis is limited. However, the combination of low trust scores, blocklist presence, and hosting characteristics warrants continued monitoring. Organizations should review logs for connections to 143.198.30.146 or subdomains of fullsailevents.com, particularly those involving event registration or payment workflows. If the domain resurfaces, defenders are advised to treat it as high-risk until additional telemetry confirms its intent or remediation.