ponmlkwww[.]fedsummer-conference-2026[.]mario-s-event-organization[.]fullsailevents[.]com

This domain is flagged as an elevated-risk generic phishing threat targeting conference attendees and event organizers. Analysis indicates the infrastructure is designed to impersonate a legitimate event management platform, likely aiming to harvest credentials or distribute fraudulent registration forms under the guise of a professional conference. The page title, 'Full Sail Events - Complete Event Management Platform for Conferences & Workshops,' suggests an attempt to deceive users into believing the site is associated with a trusted event organization, increasing the likelihood of successful social engineering. Infrastructure analysis reveals the domain ponmlkwww.fedsummer-conference-2026.mario-s-event-organization.fullsailevents.com was registered on February 21, 2026, through GoDaddy.com, LLC, and resolves to the IP address 143.198.30.146. Security vendors on VirusTotal flagged the domain, with 4 out of 95 detecting malicious activity. The domain appears on four security blocklists, including MetaMask and SEAL, and has a Gridinsoft trust score of 0/100. Detected technologies include Stripe for payment processing, HSTS for enforced HTTPS connections, and HTTP/3 for modern web protocols, which may be leveraged to enhance the site's perceived legitimacy. Mitigation steps for this specific threat type include blocking the domain and its resolving IP at the network perimeter. Organizations should alert employees and event participants about fake conference registration sites, particularly those impersonating known platforms. Users should verify the authenticity of event-related communications by cross-referencing with official sources and inspecting domain registration details for anomalies. If credentials were entered on this site, immediate password resets and multi-factor authentication enforcement are recommended. Monitoring for unauthorized transactions or data access linked to this phishing campaign is advised.