Scan report · about 1 month agoPublic

www.seedsalad.com

172.67.188.78AS13335 · US

Submittedhttps://www.seedsalad.com/

page reads command-and-control from a blockchain node while presenting no crypto context (rpc-mainnet.matic.quiknode.pro, polygon.gateway.tenderly.co)

Engine tags

EtherHiding

Verdict

3 of 7 enginesMaliciousAutomated

Own this site?

Dangerous — confirmed threat

Automated

It is listed on external threat-intelligence feeds. We found strong evidence that this site is malicious — for example a phishing page, a scam, or hostile code. Treat anything it asked for (passwords, card details, codes) as exposed.

What to do

Do not enter any information or download anything. If you already did, change those passwords now and contact your bank if payment details were involved. Block or report the link to your team.

This reflects the evidence found at the time of the scan. If you believe it is a mistake, you can escalate it for analyst review.

Findings

Strongest first

Suspicious fileSuspicious content in the downloaded file

759c218c-9f7d-4735-bb3e-1901eb0f0a60.html

Our Content Inspection engine downloaded the file this URL serves and analyzed it. The payload shows traits commonly seen in malware. Treat it as unsafe until verified.

Success

SHA-256 91d9ce68481d39e07666056b0740128b37d5d3eec7b373e9cb561103a74d632f

InfoCross-domain scripts injected at runtime

3 script(s)

The page dynamically injected scripts from other domains. This is extremely common on legitimate sites (CDNs, analytics, asset domains) and is shown for context only.

Analyst noteNoisy by itself — a CDN/asset domain (e.g. a brand's own *.githubassets.com) is normal. Only meaningful if the source domain is unrelated/suspicious.

Infrastructure

IP: 172.67.188.78CLOUDFLARENET - Cloudflare, Inc., US · AS13335US
TLS: CN=WE1, O=Google Trust Services, C=US · expires Oct 29, 2026

WHOIS

Registrar: Tucows Domains Inc.
Created: Mar 7, 2014
Expires: Mar 7, 2027
Nameservers: alla.ns.cloudflare.comlex.ns.cloudflare.com

68 malicious34 suspicious

Hashes & fingerprints

Page Hashd93ea13d1f9312734c26006c61eb6918fb015be69d42ecf534dd515ee47f7fab Favicon Hash6bdb369337ac2496761c6f063bffea0aa6a91d4662279c399071a468251f51f0 DOM Hash96ca4f0f2c6e1c11bb8fab8026e19ffe144a32c2563968a0ec087a0356a890d2 Screenshot pHash8000dfc1907f6fe7 JARM27d40d40d00040d1dc42d43d00041d6183ff1bfae51ebd88d70384363d525c JA4Xa373a9f83c6b_7022c563de38_2e3757343cb0 Cert ThumbprintE410EF33CACB10F19FDF57E5F3B7F53E75F10905 Cert IssuerCN=WE1, O=Google Trust Services, C=US

Page capture

Live

Title “SeedSalad | Premium quality seed blisters”

Visit Site

Engines

7 · time to verdict