lkjiwww[.]dsummer-conference-2026[.]mario-s-event-organization[.]fullsailevents[.]com

Analysis of the domain lkjiwww.dsummer-conference-2026.mario-s-event-organization.fullsailevents.com indicates an elevated-risk generic phishing threat. The domain, registered through GoDaddy.com, LLC on February 21, 2026, resolves to IP address 143.198.30.146, hosted on DigitalOcean, LLC (AS14061) infrastructure in the United States. Nameservers point to Cloudflare (leia.ns.cloudflare.com and quentin.ns.cloudflare.com), a common configuration for both legitimate and malicious domains. The domain has been flagged by three security blocklists: PhishDestroy, MetaMask, and SEAL, suggesting active detection by anti-phishing vendors.

The page title, 'Full Sail Events - Complete Event Management Platform for Conferences & Workshops,' implies an attempt to mimic a legitimate event management service, though the exact content and intent of the phishing page remain unconfirmed. No SSL certificate was detected, increasing the likelihood of interception or manipulation of user data. Technologies identified include Stripe, HSTS, and HTTP/3, which may be employed to enhance the appearance of legitimacy or facilitate payment processing. As of the report date, the domain is offline, though its prior status and infrastructure remain relevant for historical analysis.

Two of 93 security vendors on VirusTotal flagged the domain, providing additional corroboration of its suspicious nature. Defenders should treat this domain as part of a broader phishing campaign targeting event-related services. Monitoring for re-activation or similar domains under the fullsailevents.com subdomain structure is recommended. No further details about the specific phishing kit, targeted brands, or victim demographics are available at this time.