ihkfedsummer-conference-2026[.]mario-s-event-organization[.]fullsailevents[.]com

The domain ihkfedsummer-conference-2026.mario-s-event-organization.fullsailevents.com was registered through GoDaddy.com, LLC on February 21, 2026. DNS resolution points to IP address 143.198.30.146, which is owned by AS14061 DigitalOcean, LLC and geolocated to the United States. No SSL certificate is presented, indicating the site is served over plain HTTP. The page title returned from the live host reads “Full Sail Events – Complete Event Management Platform for Conferences & Workshops”, suggesting an attempt to impersonate a legitimate event‑management service. The hosting infrastructure advertises Stripe, HSTS, and HTTP/3, but these technologies do not confirm legitimacy. The domain appears on three external blocklists and has been actively blocked by PhishDestroy, MetaMask, and SEAL.

Gridinsoft assigns a trust score of 0 out of 100, reflecting a very low confidence rating. VirusTotal scans show that two of ninety‑three security vendors flagged the domain, providing independent confirmation of malicious behavior. Nameserver configuration lists leia.ns.cloudflare.com and quentin.ns.cloudflare.com, both Cloudflare authority records, which is typical for fast‑flux or content‑delivery usage. The site’s current status is offline, which may be temporary or a takedown response. Uncertainty remains around the exact payload or credential‑collection mechanisms, as no page content or phishing form details have been captured.

Defenders should continue to monitor DNS queries for the domain and the associated IP, enforce blocklist updates, and consider adding the domain to internal deny lists. Given the absence of TLS, any attempted connections would be vulnerable to interception; however, the primary risk is the lure presented by the event‑management branding. Network traffic to the IP should be logged and examined for outbound POST requests to Stripe endpoints, which could indicate exfiltration of payment data.