ilkfedsummer-conference-2026[.]mario-s-event-organization[.]fullsailevents[.]com

Analysis of the domain ilkfedsummer-conference-2026.mario-s-event-organization.fullsailevents.com indicates an elevated-risk generic phishing campaign targeting event management platforms. The subdomain was registered on February 21, 2026, through GoDaddy.com, LLC, and currently resolves to the IP address 143.198.30.146, hosted on DigitalOcean, LLC's infrastructure (AS14061) in the United States. The domain's nameservers are configured under Cloudflare (leia.ns.cloudflare.com and quentin.ns.cloudflare.com), a common practice among threat actors to obscure hosting details and evade takedowns. Security vendors have flagged this domain on three blocklists, including PhishDestroy, MetaMask, and SEAL. While only 2 of 93 security vendors on VirusTotal detect this domain as malicious, this limited detection does not indicate safety, as phishing domains often evade initial scans.

The domain lacks an SSL certificate, increasing the risk of interception or manipulation of user data. Technologies detected include Stripe, HSTS, and HTTP/3, suggesting an attempt to mimic legitimate payment and security features commonly found on event management platforms. The page title, 'Full Sail Events - Complete Event Management Platform for Conferences & Workshops,' aligns with the domain's apparent targeting of conference or workshop attendees. However, the exact content and functionality of the site remain unanalyzed, and no specific brand impersonation or scam category has been confirmed beyond the generic phishing classification.

Gridinsoft assigns a trust score of 0/100, further indicating malicious intent. Defenders should treat this domain as compromised infrastructure. Organizations are advised to block the domain and its resolving IP (143.198.30.146) at the network level, monitor for related subdomains under the fullsailevents.com parent domain, and alert users to avoid interaction with any communications or links associated with this campaign.