kjilkjidsummer-conference-2026[.]mario-s-event-organization[.]fullsailevents[.]com

This domain, kjilkjidsummer-conference-2026.mario-s-event-organization.fullsailevents.com, operates as a generic phishing infrastructure designed to impersonate a legitimate event management platform. Analysis indicates the site likely targeted attendees of conferences or workshops by mimicking registration or payment portals, potentially harvesting credentials or financial data. The inclusion of Stripe integration suggests an intent to process fraudulent transactions or collect payment details under false pretenses. The domain’s structure, combining event-related keywords with a seemingly legitimate subdomain hierarchy, increases its credibility to unsuspecting users. Evidence supporting the malicious nature of this domain includes detection by 4 out of 95 security vendors on VirusTotal, a trust score of 0/100 from Gridinsoft, and presence on three security blocklists. The domain was registered on February 21, 2026, through GoDaddy.com, LLC, and resolved to the IP address 143.198.30.146. Additional technical indicators include the use of HSTS and HTTP/3, which may have been employed to lend an air of legitimacy to the phishing page. The domain has since been taken offline, but its infrastructure remains a documented threat. Users who visited this domain should immediately revoke any credentials entered on the site, particularly if they provided login details or payment information. Monitor financial accounts for unauthorized transactions and consider placing a fraud alert with relevant institutions. If browser-based cryptocurrency extensions were used on the site, users should assume potential exposure to wallet-draining scripts and take steps to secure their assets, including transferring funds to a new wallet. Organizations should update security blocklists to include this domain and its associated IP address to prevent future access attempts.