srqpsrqponmlkjehcbedcbupdate[.]zyxwvuponmlkjihgfedsummer-conference-2026[.]mario-s-event-organization[.]fullsailevents[.]com

This domain, srqpsrqponmlkjehcbedcbupdate.zyxwvuponmlkjihgfedsummer-conference-2026.mario-s-event-organization.fullsailevents.com, is identified as a credential phishing threat designed to impersonate Full Sail Events, a legitimate event management platform. Analysis indicates the domain hosts a fraudulent portal titled 'Full Sail Events - Complete Event Management Platform for Conferences & Workshops,' likely intended to harvest login credentials from attendees or organizers of conferences and workshops. The use of subdomains mimicking event-related terminology (e.g., 'summer-conference-2026') suggests a targeted approach to deceive victims into believing they are accessing an official registration or management interface. No specific drainer kit signatures were detected, but the presence of Stripe and HSTS technologies may be leveraged to enhance the appearance of legitimacy. Technical indicators confirm the domain's malicious intent. It resolves to the IP address 143.198.30.146 and was registered on February 22, 2026, through GoDaddy.com, LLC. The domain appears on three security blocklists and is flagged by 1 out of 95 security vendors on VirusTotal, indicating limited but confirmed detection. Gridinsoft assigns a trust score of 0/100, further corroborating its classification as high-risk. The domain is blocked by multiple security mechanisms, including MetaMask and SEAL, which target phishing and fraudulent sites. Despite its recent creation, the infrastructure exhibits characteristics consistent with credential harvesting campaigns, including the use of HTTP/3 for potential evasion of network-based detection. As of the latest assessment, the domain has been taken offline, likely in response to detection and reporting by security vendors. However, the registrar and hosting infrastructure remain active, posing a residual risk of re-emergence under a similar or altered domain. Organizations and individuals are advised to monitor for lookalike domains using permutations of 'Full Sail Events' or event-related keywords, particularly those registered through the same registrar or resolving to the same IP range. Users should verify the authenticity of event management portals by cross-referencing official communications and employing multi-factor authentication to mitigate credential exposure risks.