educmansur[.]online

This domain is under investigation for generic_phishing activity targeting organizations seeking Halal certification. Analysis indicates the site impersonates legitimate certification bodies, likely to harvest credentials or distribute fraudulent documents. The threat type suggests broad targeting rather than a campaign focused on a single entity, increasing exposure risk for unsuspecting businesses. Infrastructure analysis reveals the following technical indicators: the domain educmansur.online currently shows 0 detections across 95 security engines on VirusTotal, meaning no automated systems have flagged it as malicious yet. It is registered through Global Domain Group LLC and resolves to IP address 104.21.28.19, a Cloudflare-associated IP often used to mask origin servers. The domain was created on July 01, 2026, an anomalous future date likely indicating falsified registration details. The SSL certificate is issued by Google Trust Services, providing HTTPS encryption but no inherent trust validation. No blocklist entries or negative trust scores were identified at the time of this report. Mitigation steps for this specific threat type include implementing email filtering rules to block messages containing the domain or its IP. Network administrators should add 104.21.28.19 to firewall deny lists and monitor for connections to this address. Organizations in the Halal certification sector should verify all certification requests through official channels only, avoiding links or attachments from educmansur.online. Security teams are advised to treat any credential submissions to this domain as compromised and initiate password resets for affected accounts. The anomalous creation date and lack of detections warrant continued monitoring for additional indicators of compromise.