dashtours[.]net

This domain is currently under investigation for brand impersonation, specifically targeting the Ledger cryptocurrency hardware wallet brand. The risk level is elevated because the site was designed to deceive users into believing it was affiliated with Ledger, potentially to steal credentials or seed phrases. While the site is now offline, its recent creation and registration through GoDaddy suggest it was set up for malicious purposes.

Technical indicators reveal several red flags: the domain was created on April 26, 2026, a very recent date consistent with phishing campaigns. It resolves to IP address 141.193.213.10, and while VirusTotal shows 0 detections out of 95 scanners, it already appears on one security blocklist. The SSL certificate was issued by Let's Encrypt (E8), which is commonly abused by threat actors. The page title, "Savannah Bonaventure Dash Tours | Bonaventure Cemetery Tours," is unrelated to Ledger, indicating the site might have been used for multiple scams or as a cover. The domain was registered through GoDaddy.com, LLC, a popular registrar for both legitimate and malicious sites.

Users who may have visited dashtours.net should take immediate action: change any passwords used on that site, enable two-factor authentication on all cryptocurrency accounts, and monitor for unauthorized transactions. Since the threat is brand impersonation, users should only access Ledger services through official channels like ledger.com. If any credentials or recovery phrases were entered, assume they are compromised and transfer funds to a new wallet immediately. Report the domain to Ledger's security team and relevant authorities to help takedown efforts.