jabb[.]mn

The domain jabb.mn has been identified as a brand impersonation threat specifically targeting Sei, a cryptocurrency platform. This domain is designed to deceive users into believing they are interacting with legitimate Sei services, potentially leading to credential theft, unauthorized transactions, or malware distribution. Analysis confirms the domain is currently offline, though its prior activity warrants continued monitoring. Infrastructure analysis reveals jabb.mn was registered on September 21, 2025, through PDR Ltd. d/b/a PublicDomainRegistry.com. It resolves to the IP address 104.21.37.141 and utilizes an SSL certificate issued by Google Trust Services. The domain is flagged by 5 of 95 security vendors on VirusTotal and appears on three distinct security blocklists, including CryptoFirewall, PhishDestroy, and OISD. Additional technical indicators include the use of Cloudflare infrastructure and HTTP/3 protocol, which may obscure malicious activity. A Gridinsoft trust score of 0/100 further corroborates its high-risk classification. Current status indicates jabb.mn has been taken offline, with the page title displaying 'This Website Has Been Seized.' However, the domain's recent creation date and prior malicious indicators suggest it may resurface under altered infrastructure. Organizations and individuals are advised to block this domain at the network level, monitor for related subdomains or IP associations, and educate users on recognizing brand impersonation tactics. If this domain was previously accessed, immediate credential rotation and system scans for malware are recommended.