lkjihgfidsummer-conference-2026[.]mario-s-event-organization[.]fullsailevents[.]com

This domain is flagged as an elevated-risk credential theft phishing site impersonating a conference management platform. Analysis indicates the infrastructure was designed to harvest login credentials, payment details, or personally identifiable information from event registrants under the guise of a legitimate event organization service. Infrastructure analysis reveals the domain was registered on February 21, 2026, through GoDaddy.com, LLC and resolves to IP address 143.198.30.146. Security vendors report a Gridinsoft trust score of 0/100, with detection by 2 out of 95 VirusTotal engines. The domain appears on three security blocklists and is actively blocked by MetaMask, SEAL, and PhishDestroy. Detected technologies include Stripe integration, HSTS enforcement, and HTTP/3 protocol support, suggesting an attempt to mimic legitimate payment processing and secure communication standards. Organizations should implement immediate mitigation measures to counter this credential theft threat. Block the domain and associated IP address 143.198.30.146 at the network perimeter. Instruct users to verify event registration portals through official channels only, avoiding links in unsolicited communications. Monitor for unauthorized access attempts using credentials potentially compromised through this phishing infrastructure. Security teams should review logs for connections to the identified IP address and domain, particularly from systems used by personnel involved in event planning or registration activities.