staging[.]ipeline-prod[.]pearson367[.]com

PhishDestroy identifies staging.ipeline-prod.pearson367.com as an active crypto drainer under investigation. This domain is engineered to deceive users into connecting cryptocurrency wallets, resulting in unauthorized token transfers and asset theft. The site is not a legitimate service and should be treated as hostile.

This domain was flagged by PhishDestroy after technical analysis revealed multiple red flags. It resolves to IP 185.149.120.183 and is registered through GoDaddy.com, LLC. The domain was created on March 02, 2018, and currently holds a Let’s Encrypt SSL certificate. Despite zero detections on VirusTotal (12/95 engines), this lack of detection does not indicate safety, as new campaigns often evade initial scans. No known blocklists currently flag it, and trust scores remain unreliable for such recently active malicious domains.

Users who encounter this domain should immediately disconnect any connected wallets and avoid interacting with it further. Always verify URLs against trusted sources like PhishDestroy before entering sensitive information or connecting digital assets. If you suspect exposure, revoke wallet permissions via your wallet’s security settings and monitor for unauthorized transactions. Never rely on SSL or domain age as indicators of legitimacy.