Scan report · about 1 month agoPublic

www.seedsalad.com

104.21.32.243AS13335 · US

Submittedhttps://www.seedsalad.com/

page reads command-and-control from a blockchain node while presenting no crypto context (rpc-mainnet.matic.quiknode.pro, polygon.gateway.tenderly.co)

Engine tags

EtherHiding

Verdict

3 of 7 enginesMaliciousAutomated

Own this site?

Dangerous — confirmed threat

Automated

It is listed on external threat-intelligence feeds. We found strong evidence that this site is malicious — for example a phishing page, a scam, or hostile code. Treat anything it asked for (passwords, card details, codes) as exposed.

What to do

Do not enter any information or download anything. If you already did, change those passwords now and contact your bank if payment details were involved. Block or report the link to your team.

This reflects the evidence found at the time of the scan. If you believe it is a mistake, you can escalate it for analyst review.

Findings

Strongest first

Suspicious fileSuspicious content in the downloaded file

5013ff64-294b-4bfa-a271-b1d32be331ed.html

Our Content Inspection engine downloaded the file this URL serves and analyzed it. The payload shows traits commonly seen in malware. Treat it as unsafe until verified.

Success

SHA-256 00f3ce0f89ed16aa3f17ea4c72c9be7feb400bd3aa882f3ca1782911607b5f1e

InfoCross-domain scripts injected at runtime

3 script(s)

The page dynamically injected scripts from other domains. This is extremely common on legitimate sites (CDNs, analytics, asset domains) and is shown for context only.

Analyst noteNoisy by itself — a CDN/asset domain (e.g. a brand's own *.githubassets.com) is normal. Only meaningful if the source domain is unrelated/suspicious.

Infrastructure

IP: 104.21.32.243CLOUDFLARENET - Cloudflare, Inc., US · AS13335US
TLS: CN=WE1, O=Google Trust Services, C=US · expires Oct 29, 2026

WHOIS

Registrar: Tucows Domains Inc.
Created: Mar 7, 2014
Expires: Mar 7, 2027
Nameservers: alla.ns.cloudflare.comlex.ns.cloudflare.com

157 malicious13 suspicious

Hashes & fingerprints

Page Hashda6bbeeba0842d28f036d2266e2fb421f78105759e44a2af58c993625c9c7402 Favicon Hash6bdb369337ac2496761c6f063bffea0aa6a91d4662279c399071a468251f51f0 DOM Hashfb2df3833aa89c351be8be0d2a2852921b9be385d49b8bc0d3bb7262cc26d196 Screenshot pHashbf3fc0d190382d47 JARM27d40d40d00040d1dc42d43d00041d6183ff1bfae51ebd88d70384363d525c JA4Xa373a9f83c6b_7022c563de38_2e3757343cb0 Cert ThumbprintE410EF33CACB10F19FDF57E5F3B7F53E75F10905 Cert IssuerCN=WE1, O=Google Trust Services, C=US

Page capture

Live

Title “SeedSalad | Premium quality seed blisters”

Visit Site

Engines

7 · time to verdict