update[.]rqporqpkjihgfedsummer-conference-2026[.]mario-s-event-organization[.]fullsailevents[.]com

The domain update.rqporqpkjihgfedsummer-conference-2026.mario-s-event-organization.fullsailevents.com was identified as a credential phishing threat impersonating Full Sail Events, a legitimate event management platform. This phishing campaign targeted users by mimicking a trusted brand to steal login credentials. No specific drainer kit was associated with this threat.

Technical analysis reveals that the domain had a VirusTotal detection rate of 2 out of 95 security vendors, indicating low initial detection. It appeared on three security blocklists and was registered through GoDaddy.com, LLC. The domain resolved to IP address 143.198.30.146, was created on February 21, 2026, and lacked an SSL certificate, further signaling its malicious intent. Google Safe Browsing status was not listed, but the domain was flagged by multiple blocklists.

The domain is currently offline, having been taken down after detection. Response actions included coordination with the registrar and hosting provider to disable the site. However, residual risk remains as similar domains may be deployed. Users are advised to avoid clicking links in unsolicited emails and to verify URLs before entering credentials. PhishDestroy recommends monitoring for lookalike domains and enabling multi-factor authentication on all accounts.