kjihkfedsummer-conference-2026[.]mario-s-event-organization[.]fullsailevents[.]com

Analysis of kjihkfedsummer-conference-2026.mario-s-event-organization.fullsailevents.com indicates an elevated-risk generic phishing domain registered on February 21, 2026, through GoDaddy.com, LLC. The subdomain resolves to 143.198.30.146 (AS14061 DigitalOcean, LLC, US) and was served via Cloudflare nameservers leia.ns.cloudflare.com and quentin.ns.cloudflare.com. No SSL certificate was detected at the time of assessment, increasing exposure to interception or tampering. Technologies identified include Stripe, HSTS, and HTTP/3, suggesting an attempt to appear legitimate by adopting security and payment protocols. The domain was flagged by three security blocklists, including PhishDestroy, MetaMask, and SEAL.

Two of 95 security vendors on VirusTotal detected the domain as malicious. The page title, 'Full Sail Events - Complete Event Management Platform for Conferences & Workshops,' implies targeting of event organizers or attendees, though no specific brand impersonation or scam type is confirmed. The domain was taken offline prior to July 25, 2026, limiting further analysis of its operational content or payload. Defenders should treat this domain as compromised infrastructure.

Blocklist the full subdomain and IP 143.198.30.146 at network and endpoint layers. Monitor for reuse of the parent domain fullsailevents.com or associated Cloudflare nameservers in future campaigns. Review logs for connections to 143.198.30.146 or DNS queries for kjihkfedsummer-conference-2026.mario-s-event-organization.fullsailevents.com between February and July 2026. No evidence confirms targeted sectors or payload delivery, so correlation with credential theft or payment fraud should be based on observed network activity rather than domain classification alone.