onmwww[.]hgfedsummer-conference-2026[.]mario-s-event-organization[.]fullsailevents[.]com

The domain onmwww.hgfedsummer-conference-2026.mario-s-event-organization.fullsailevents.com is identified as a credential theft operation impersonating Full Sail Events, a legitimate event management platform. Analysis indicates the site was designed to harvest user login credentials under the guise of a conference registration portal. The domain is currently offline, but prior activity suggests targeted phishing campaigns against attendees of future events. Infrastructure analysis reveals the domain was registered on February 21, 2026, through GoDaddy.com, LLC and resolves to IP address 143.198.30.146. It appears on three security blocklists and is flagged by 3 of 95 VirusTotal vendors. Technologies detected include Stripe for payment processing, HSTS for enforced HTTPS connections, and HTTP/3 for performance optimization—common elements in legitimate platforms but exploited here to enhance credibility. The Gridinsoft trust score for this domain is 0/100, indicating no reputable standing. Additional blocking has been implemented by MetaMask, SEAL, and PhishDestroy, further corroborating its malicious intent. The domain has been taken offline, but similar infrastructure may re-emerge under different subdomains or aliases. Organizations are advised to proactively block the IP 143.198.30.146 and monitor for newly registered domains under the fullsailevents.com namespace. Users who interacted with the site should reset credentials immediately and enable multi-factor authentication on all associated accounts. Event organizers should issue warnings to potential attendees about fraudulent registration portals and verify all official communications through verified channels.