summerroc[.]weebly[.]com

This domain, summerroc.weebly.com, is identified as a brand impersonation threat targeting Exodus, a cryptocurrency wallet provider. The site presents itself as an official Exodus wallet interface under the page title 'Exodus wallet - summerroc,' likely designed to deceive users into entering sensitive credentials or private keys. No direct evidence of a crypto drainer kit was observed, but the infrastructure aligns with common phishing tactics used to compromise digital asset wallets. Analysis indicates the domain was created on March 29, 2006, though the phishing content appears to have been hosted more recently. It is registered through MarkMonitor Inc. and resolves to the IP address 74.115.51.8. Security vendor assessments on VirusTotal flag the domain as malicious, with 11 out of 95 engines detecting it. The domain appears on two security blocklists and is actively blocked by multiple threat intelligence feeds. The SSL certificate is issued by Let's Encrypt, and the site employs technologies including Weebly, MySQL, PHP, Amazon Web Services, and Cloudflare, which are consistent with phishing infrastructure. Currently, the domain is offline, reducing immediate risk to users. However, the infrastructure remains registered and could be reactivated. The registrar, MarkMonitor Inc., has not released public details regarding takedown requests or enforcement actions. Users who interacted with this domain should assume credential or asset compromise and take immediate steps to secure their wallets, including revoking permissions, transferring assets, and monitoring for unauthorized transactions. Organizations should update blocklists to include this domain and its associated IP to prevent future access.