lstgroup[.]site

The domain lstgroup.site is a phishing site engaged in brand impersonation targeting Revolut users. It presents itself as a legitimate financial or trading service under the name 'LST - Legends Smart Traders Alliance' but is designed to deceive victims into disclosing sensitive information or credentials. No crypto drainer kit was identified. The site is currently taken offline, reducing immediate risk, though prior exposure may still pose threats to affected individuals.

Technical indicators confirm lstgroup.site as malicious. The domain was flagged by 1 of 95 VirusTotal security vendors, specifically Gridinsoft, and appears on 1 security blocklist (PhishDestroy). It was registered on 2025-05-15 17:38:34 through Gname.com Pte. Ltd. and resolves to IP address 172.67.130.49, hosted on Cloudflare’s network (AS13335, US). No SSL certificate was issued, and the domain uses a single nameserver. Google Safe Browsing did not flag the site at the time of analysis.

Individuals who interacted with lstgroup.site should immediately change any compromised credentials, particularly for Revolut or linked financial accounts, and enable two-factor authentication (2FA) where available. Monitor accounts for unauthorized transactions or suspicious activity. Report the phishing domain to relevant platforms, including the impersonated brand (Revolut), hosting providers, and anti-phishing organizations such as PhishTank or the Anti-Phishing Working Group (APWG). If crypto assets were involved, revoke any token approvals granted to unknown contracts and consider transferring funds to a new wallet.