ledgerliftup[.]com

ledgerliftup.com is a phishing domain engaged in brand impersonation, targeting the cryptocurrency brand Ledger. The site appeared designed to deceive users into providing sensitive information by mimicking Ledger's identity. This domain is currently taken offline and is not safe to visit due to its association with a scam. It was primarily used in a phishing attack focused on cryptocurrency users.

Technically, ledgerliftup.com was created on February 21, 2026, and is registered through Dynadot LLC. It resolves to the IP address 72.60.39.47 located in Germany under AS47583 Hostinger International Limited. The domain uses an SSL certificate issued by Easypanel and utilizes the dns nameservers ns1.dyna-ns.net and ns2.dyna-ns.net. Security intelligence shows that 2 of 95 VirusTotal vendors, including CRDF and Gridinsoft, have flagged this domain, and it is listed in one security blocklist, PhishDestroy. The HTTP status observed was 404, and the page title seen at some point was Privacy error.

For safety, users who interacted with ledgerliftup.com and provided credentials should immediately change passwords and enable two-factor authentication where possible to protect their accounts. Users should be vigilant for signs of fraud that may follow such phishing attempts and consider reporting incidents to their email or service providers and to cybersecurity organizations tracking phishing campaigns. Avoiding further interaction with ledgerliftup.com and similar phishing sites remains crucial for maintaining digital security.