svutonmlkjihgfedsummer-conference-2026[.]mario-s-event-organization[.]fullsailevents[.]com

The domain svutonmlkjihgfedsummer-conference-2026.mario-s-event-organization.fullsailevents.com was registered on February 21, 2026 through GoDaddy.com, LLC and is presently taken offline. DNS resolution points to IP address 143.198.30.146, which belongs to DigitalOcean, LLC (AS14061) and is geolocated in the United States. No SSL certificate is present, indicating that the site operated without transport‑layer encryption. The page title observed during the brief presence of the site was "Full Sail Events - Complete Event Management Platform for Conferences & Workshops," suggesting the attacker attempted to impersonate a legitimate event‑management service. Technical analysis recorded the use of Stripe payment processing, HTTP Strict Transport Security (HSTS), and the HTTP/3 protocol, indicating a relatively modern web stack despite the lack of TLS.

The domain’s nameservers are leia.ns.cloudflare.com and quentin.ns.cloudflare.com, reflecting the use of Cloudflare’s DNS infrastructure. VirusTotal scanned the site and recorded a single positive detection out of 93 security vendors, confirming at least one vendor flagged the content as malicious. The domain appears on three external blocklists and is actively blocked by PhishDestroy, MetaMask, and SEAL. Gridinsoft assigned a trust score of 0 out of 100, reinforcing the assessment of high risk. The classification in the intelligence feed is "generic phishing" with an elevated risk rating.

Uncertainty remains regarding the specific phishing payload, victim targeting, and whether the site ever hosted credential‑capture forms, as only the page title and infrastructure details are available. Defenders should add the IP address 143.198.30.146 to block lists, monitor for any future DNS resolution to this address, and enforce outbound filtering for connections to the identified Cloudflare nameservers.