jmlkjihsummer-conference-2026[.]mario-s-event-organization[.]fullsailevents[.]com

This domain, jmlkjihsummer-conference-2026.mario-s-event-organization.fullsailevents.com, is identified as a generic phishing threat targeting users through a fraudulent event management platform interface. Analysis indicates the site mimics legitimate conference registration portals, likely designed to harvest credentials, payment details, or personal data under the guise of a "Summer Conference 2026" event. No specific drainer kit signatures were detected, but the use of payment processing technologies suggests financial data exfiltration as a secondary objective. Infrastructure analysis reveals the domain was registered on February 21, 2026, through GoDaddy.com, LLC, and resolves to the IP address 143.198.30.146. Detection metrics show 4 out of 95 security vendors on VirusTotal flagged the domain as malicious, while it appears on three additional security blocklists. The Gridinsoft trust score for this domain is 0/100, further corroborating its malicious classification. Technologies detected include Stripe for payment processing, HSTS for forced encryption, and HTTP/3 for modern web performance, which may be leveraged to evade basic detection mechanisms. As of the latest assessment, the domain has been taken offline, likely in response to security vendor reports or registrar enforcement actions. However, residual risk persists due to the domain's recent creation date and the potential for infrastructure reuse under similar subdomains or newly registered lookalike domains. Organizations are advised to monitor for related indicators of compromise, including the IP address 143.198.30.146, and update blocklists to include this domain and its subdomains. Users who interacted with the site should reset credentials and review financial transactions for unauthorized activity.