ihkjihsummer-conference-2026[.]mario-s-event-organization[.]fullsailevents[.]com

This domain is flagged as a credential theft phishing site targeting event organizers and attendees under the guise of a legitimate conference management platform. Analysis indicates the infrastructure was designed to harvest login credentials, payment details, or other sensitive information by mimicking the branding and functionality of a trusted event management service. The threat type is highly specific, focusing on credential exfiltration rather than broader phishing tactics like malware distribution or crypto draining. Infrastructure analysis reveals the following technical indicators: the domain was registered through GoDaddy.com, LLC on February 21, 2026, and resolved to IP address 143.198.30.146. It appears on three security blocklists and is flagged by 2 out of 95 security vendors on VirusTotal. Additional detections include blocking by MetaMask, SEAL, and PhishDestroy, alongside a Gridinsoft trust score of 0/100. The page title, "Full Sail Events - Complete Event Management Platform for Conferences & Workshops," directly impersonates the legitimate brand, and technologies such as Stripe, HSTS, and HTTP/3 were detected, likely to enhance the illusion of authenticity. Mitigation steps for organizations and individuals include immediately blocking the domain and its associated IP address (143.198.30.146) at the network perimeter. Security teams should conduct retrospective log analysis to identify any prior interactions with this infrastructure, particularly focusing on credential submission or payment processing endpoints. Users who may have engaged with the site should reset passwords for any accounts accessed during the suspected exposure window and enable multi-factor authentication where available. Event organizers should proactively warn attendees about this impersonation attempt and provide verified channels for communication and registration. Monitoring for similar domains registered through the same registrar or resolving to the same IP range is recommended to preemptively identify related threats.