lancelotgroupllc[.]com

The domain lancelotgroupllc.com was a phishing site engaged in brand impersonation targeting Revolut users. It posed as the legitimate financial services brand to deceive victims into entering login credentials or personal information, constituting a credential phishing scam. No crypto drainer kit was associated with this campaign. The site is currently taken offline.

lancelotgroupllc.com was flagged by 1 of 95 security vendors on VirusTotal, including Gridinsoft, which assigned a trust score of 0/100. Google Safe Browsing did not flag the domain, but it appeared on 1 security blocklist (PhishDestroy). The domain was registered through OwnRegistrar, Inc. on February 17, 2025, and resolved to the IP address 192.3.190.186, hosted on AS36352 (HostPapa) in the US. The SSL certificate was issued by R10, and the observed page title was 'Innovative Healthcare Equipments', which did not align with the impersonated brand.

Victims who interacted with lancelotgroupllc.com should immediately change their Revolut account passwords and enable two-factor authentication (2FA) if not already active. Monitor account activity for unauthorized transactions or changes. Report the phishing domain to Revolut’s security team and submit it to platforms like Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group (APWG) to aid in takedown efforts.