Scan report · about 1 month agoPublic

www.seedsalad.com

172.67.188.78AS13335 · US

Submittedhttps://www.seedsalad.com/

page reads command-and-control from a blockchain node while presenting no crypto context (rpc-mainnet.matic.quiknode.pro, polygon.gateway.tenderly.co)

Engine tags

EtherHiding

Verdict

3 of 7 enginesMaliciousAutomated

Own this site?

Dangerous — confirmed threat

Automated

It is listed on external threat-intelligence feeds. We found strong evidence that this site is malicious — for example a phishing page, a scam, or hostile code. Treat anything it asked for (passwords, card details, codes) as exposed.

What to do

Do not enter any information or download anything. If you already did, change those passwords now and contact your bank if payment details were involved. Block or report the link to your team.

This reflects the evidence found at the time of the scan. If you believe it is a mistake, you can escalate it for analyst review.

Findings

Strongest first

Suspicious fileSuspicious content in the downloaded file

c7ca3996-83f4-4385-8f46-fdd29d6f9caf.html

Our Content Inspection engine downloaded the file this URL serves and analyzed it. The payload shows traits commonly seen in malware. Treat it as unsafe until verified.

Success

SHA-256 cd0dcf4a017e24fe5f9bb8a0ed1de34ad7a8598fc448e8d043bcc24194cf3500

InfoCross-domain scripts injected at runtime

3 script(s)

The page dynamically injected scripts from other domains. This is extremely common on legitimate sites (CDNs, analytics, asset domains) and is shown for context only.

Analyst noteNoisy by itself — a CDN/asset domain (e.g. a brand's own *.githubassets.com) is normal. Only meaningful if the source domain is unrelated/suspicious.

Infrastructure

IP: 172.67.188.78CLOUDFLARENET - Cloudflare, Inc., US · AS13335US
TLS: CN=WE1, O=Google Trust Services, C=US · expires Oct 29, 2026

WHOIS

Registrar: Tucows Domains Inc.
Created: Mar 7, 2014
Expires: Mar 7, 2027
Nameservers: alla.ns.cloudflare.comlex.ns.cloudflare.com

87 malicious28 suspicious

Hashes & fingerprints

Page Hashb6d3bd412f1f3669ab13841019ea613848b2d2280ef5c05b0a2a74f77bd818f3 Favicon Hash6bdb369337ac2496761c6f063bffea0aa6a91d4662279c399071a468251f51f0 DOM Hashfb2df3833aa89c351be8be0d2a2852921b9be385d49b8bc0d3bb7262cc26d196 Screenshot pHashbf3fc0d190382d47 JARM27d40d40d00040d1dc42d43d00041d6183ff1bfae51ebd88d70384363d525c JA4Xa373a9f83c6b_7022c563de38_2e3757343cb0 Cert ThumbprintE410EF33CACB10F19FDF57E5F3B7F53E75F10905 Cert IssuerCN=WE1, O=Google Trust Services, C=US

Page capture

Live

Title “SeedSalad | Premium quality seed blisters”

Visit Site

Engines

7 · time to verdict