jeabapp[.]com

This domain is flagged as a credential harvesting phishing site designed to mimic legitimate authentication portals. Analysis indicates it was used to deceive users into submitting login credentials, financial details, or other sensitive information through fraudulent web forms. The infrastructure was configured to capture and exfiltrate user input, likely for subsequent unauthorized access or identity theft operations.

Infrastructure analysis reveals the domain was registered on February 22, 2026, through Web Commerce Communications Limited. It resolves to the IP address 27.254.41.241 and is hosted on an Apache HTTP Server. Security vendors have flagged the domain with 4 detections out of 95 on VirusTotal, and it appears on three independent security blocklists. The domain has been actively blocked by multiple threat intelligence feeds, including browser-based and network-level protections.

Users who visited jeabapp.com or entered credentials on the site should immediately revoke any submitted login details from associated accounts. Reset passwords for all potentially compromised services, particularly those linked to financial, email, or identity management platforms. Enable multi-factor authentication where available and monitor accounts for unauthorized activity. If financial information was disclosed, contact relevant institutions to report potential fraud and request transaction monitoring. Network administrators should add the domain and its associated IP to internal blocklists to prevent further access.