hkjidsummer-conference-2026[.]mario-s-event-organization[.]fullsailevents[.]com

The domain hkjidsummer-conference-2026.mario-s-event-organization.fullsailevents.com is identified as a generic phishing site designed to impersonate legitimate event management platforms. Analysis indicates the domain specifically targets conference and workshop attendees, likely with the intent to harvest credentials, payment details, or distribute malware under the guise of event registration or ticketing. The page title, 'Full Sail Events - Complete Event Management Platform for Conferences & Workshops,' suggests an attempt to deceive users into believing the site is associated with a trusted event organization, though no legitimate affiliation exists. Infrastructure analysis reveals the domain is flagged by 2 of 95 security vendors on VirusTotal, with a Gridinsoft trust score of 0/100. It appears on three security blocklists and is blocked by MetaMask, SEAL, and PhishDestroy. The domain resolves to the IP address 143.198.30.146 and was registered through GoDaddy.com, LLC on February 21, 2026. Detected technologies include Stripe for payment processing, HSTS for enforced HTTPS connections, and HTTP/3 for modern web protocols, which may be leveraged to lend an air of legitimacy to the fraudulent site. As of the latest assessment, the domain has been taken offline, reducing immediate risk to potential victims. However, the infrastructure and registration details suggest the threat actor may re-deploy similar phishing campaigns under different domains. Organizations and individuals are advised to monitor for newly registered domains with similar naming conventions, particularly those impersonating event platforms or using terms like 'conference,' 'workshop,' or 'registration.' Network defenders should block the IP address 143.198.30.146 and any associated domains at the perimeter. Users who may have interacted with the site should reset credentials for any accounts accessed during the encounter and review payment statements for unauthorized transactions. Security teams are encouraged to correlate this intelligence with internal logs to identify potential prior exposure.