testnet[.]grandline[.]world

PhishDestroy identifies testnet.grandline.world as an active crypto drainer domain under investigation, posing as a legitimate Grand Line service.

This domain resolves to IP 104.21.59.55 and is secured with a Google Trust Services SSL certificate. VirusTotal reports 0 detections from 95 vendors, indicating it has evaded initial automated scanning. The domain’s technical indicators—including its recent creation date and single IP resolution—suggest a hastily deployed threat actor infrastructure. With no current blocklist presence, this domain remains in a low-visibility state, increasing the risk of undetected malicious activity.

The domain’s use of a crypto drainer scheme, combined with its lack of detection and minimal infrastructure footprint, suggests an opportunistic attack targeting cryptocurrency users. PhishDestroy assesses this as a LOW-to-MEDIUM risk due to the absence of widespread flagging but high potential for user deception. Users are advised to avoid interacting with testnet.grandline.world and verify any Grand Line-related domains via PhishDestroy’s threat intelligence platform before engaging.