kjihkjidsummer-conference-2026[.]mario-s-event-organization[.]fullsailevents[.]com

Analysis indicates the domain kjihkjidsummer-conference-2026.mario-s-event-organization.fullsailevents.com was registered on February 21, 2026 through GoDaddy.com, LLC and is currently resolved to the IP address 143.198.30.146, which belongs to AS14061 DigitalOcean, LLC in the United States. The site is hosted on a DigitalOcean server and uses Cloudflare name servers (leia.ns.cloudflare.com, quentin.ns.cloudflare.com). No SSL certificate is presented; the HTTP response does not include TLS, confirming the lack of encryption. The page title returned from the live endpoint reads “Full Sail Events - Complete Event Management Platform for Conferences & Workshops”, suggesting the domain was masquerading as an event‑management service. Detected technologies include Stripe, HSTS and HTTP/3, indicating that the site attempted to load modern web features despite the missing certificate.

Two of ninety‑three VirusTotal scanners flagged the domain, and three independent blocklists (PhishDestroy, MetaMask, SEAL) have already listed it as malicious. Gridinsoft assigned a trust score of 0 out of 100, reinforcing the low credibility assessment. The domain appears on three additional security blocklists, further confirming its reputation as a phishing host. The threat type is classified as generic phishing, consistent with the observed use of a legitimate‑sounding event‑management brand to lure victims. Given the offline status, active mitigation has already been applied by several blocklist operators.

Defensive teams should continue to block any DNS resolution to the associated IP address and enforce network‑level filtering for the full domain name and its sub‑domains. Monitoring for re‑registration or the emergence of similar patterns in newly created domains that reuse the “fullsailevents.com” brand or the same registrar may help detect follow‑up campaigns.