jihkjihsummer-conference-2026[.]mario-s-event-organization[.]fullsailevents[.]com

Analysis of the domain jihkjihsummer-conference-2026.mario-s-event-organization.fullsailevents.com indicates an elevated-risk generic phishing threat, currently offline as of July 24, 2026. The subdomain was registered through GoDaddy.com, LLC on February 21, 2026, and resolves to the IP address 143.198.30.146, hosted on DigitalOcean, LLC (AS14061) in the United States. Nameservers point to Cloudflare (leia.ns.cloudflare.com and quentin.ns.cloudflare.com), a common configuration for both legitimate and malicious infrastructure. The page title, 'Full Sail Events - Complete Event Management Platform for Conferences & Workshops,' suggests an attempt to impersonate an event management service, though no direct evidence confirms the specific brand being targeted or the exact nature of the phishing content.

Infrastructure analysis reveals the absence of an SSL certificate, which is unusual for a purported event management platform but consistent with low-effort phishing campaigns. Technologies detected include Stripe, HSTS, and HTTP/3, which may indicate an attempt to appear legitimate or leverage modern web protocols for evasion. The domain appears on three security blocklists, and two of 93 security vendors on VirusTotal flagged it as malicious. Detection by PhishDestroy, MetaMask, and SEAL further supports its classification as a phishing threat.

Defenders should note that the domain is currently offline, reducing immediate risk, but its infrastructure remains a potential vector for future malicious activity. The use of Cloudflare nameservers and DigitalOcean hosting is not inherently suspicious but warrants monitoring due to the domain's detection history. Organizations should block the domain and IP at the perimeter, and security teams should investigate any prior interactions with this infrastructure.