Report - www.alldaymedicines.com/uploaded_files/userfiles/files/cool-free-items-in-roblox

Report Overview

Visited public
2025-05-03 14:51:52
Tags
URL
www.alldaymedicines.com/uploaded_files/userfiles/files/cool-free-items-in-roblox_GM431946152.pdf
Finishing URL
www.alldaymedicines.com/uploaded_files/userfiles/files/cool-free-items-in-roblox_GM431946152.pdf
IP / ASN
54.251.3.164
#16509 AMAZON-02
Title
Cool Free Items In Roblox - cool-free-items-in-roblox_GM431946152.pdf

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
www.alldaymedicines.com	unknown	2021-01-08	2022-08-02	2023-06-24	992 B	50 kB	54.251.3.164

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
www.alldaymedicines.com/uploaded_files/userfiles/files/cool-free-items-in-roblox_GM431946152.pdf
IP
54.251.3.164
ASN
#16509 AMAZON-02

File type
PDF document, version 1.4, 0 page(s)
Size
35 kB (34848 bytes)
Hash
a9d695e117fc5daf561a8cbf92d89023
0f757ec2d37f501ed75db971035f50540873a798
7d8f820d6edbf70d94ba35829c265c5f7ee922808d24dd5a8915d996b468fe0b

Detections

Analyzer	Verdict	Alert
VirusTotal	malicious	VirusTotal - Scan result 15/59

PDF Document detected

URL
www.alldaymedicines.com/uploaded_files/userfiles/files/cool-free-items-in-roblox_GM431946152.pdf
IP / ASN
54.251.3.164
#16509 AMAZON-02

PDF Overview
Version 1.4
Author
Title Cool Free Items In Roblox
Subject
Page Count 2

URLs Found
https://www.alldaymedicines.com/uploaded_files/userfiles/files/coin-master-facebook_GM406889139.pdf
https://www.alldaymedicines.com/uploaded_files/userfiles/files/free-minecraft-com_GM479516143.pdf
https://www.alldaymedicines.com/uploaded_files/userfiles/files/descargar-hack-deathrun-roblox_GM431946152.pdf
https://www.alldaymedicines.com/uploaded_files/userfiles/files/coin-master-free-spins-link-2021_GM406889139.pdf
https://www.alldaymedicines.com/uploaded_files/userfiles/files/minecraft-hack-client-18-9_GM479516143.pdf
https://www.alldaymedicines.com/uploaded_files/userfiles/files/how-to-change-roblox-username-for-free_GM431946152.pdf
https://www.alldaymedicines.com/uploaded_files/userfiles/files/latest-free-spin-coin-master-daily_GM406889139.pdf
https://www.alldaymedicines.com/uploaded_files/userfiles/files/easy-robux-today_GM431946152.pdf
https://www.alldaymedicines.com/uploaded_files/userfiles/files/minecraft-free-download-linux_GM479516143.pdf
https://www.alldaymedicines.com/uploaded_files/userfiles/files/mobihack-net-roblox-hack_GM431946152.pdf
http://netcdn.co/app/431946152/cool-free-items-in-roblox-game-hack
http://netcdn.co/app/431946152/cool-free-items-in-roblox-game-hack
https://www.alldaymedicines.com/uploaded_files/userfiles/files/coin-master-spins-hack-iphone_GM406889139.pdf
https://www.alldaymedicines.com/uploaded_files/userfiles/files/free-domain-for-minecraft-server_GM479516143.pdf
https://www.alldaymedicines.com/uploaded_files/userfiles/files/minecraft-bedrock-hacks_GM479516143.pdf
https://www.alldaymedicines.com/uploaded_files/userfiles/files/coin-master-hack-pro_GM406889139.pdf
https://www.alldaymedicines.com/uploaded_files/userfiles/files/free-robux-offers_GM431946152.pdf
https://www.alldaymedicines.com/uploaded_files/userfiles/files/roblox-comroblox_GM431946152.pdf
https://www.alldaymedicines.com/uploaded_files/userfiles/files/how-to-hack-roblox-to-get-robux_GM431946152.pdf
https://www.alldaymedicines.com/uploaded_files/userfiles/files/real-robux-generator_GM431946152.pdf
https://www.alldaymedicines.com/uploaded_files/userfiles/files/minecraft-free-no-download_GM479516143.pdf
https://www.alldaymedicines.com/uploaded_files/userfiles/files/how-to-cheat-roblox-dragon-ball-rage_GM431946152.pdf

JavaScript (0)

HTTP Transactions (2)

URL IP Response Size

www.alldaymedicines.com/uploaded_files/userfiles/files/cool-free-items-in-roblox_GM431946152.pdf

54.251.3.164

200 OK

35 kB

URL User Request GET
www.alldaymedicines.com/uploaded_files/userfiles/files/cool-free-items-in-roblox_GM431946152.pdf
IP
54.251.3.164:443
ASN
#16509 AMAZON-02

Certificate
IssuerSectigo Limited
Subjectwww.alldaymedicines.com
Fingerprint6C:67:88:F9:6D:9B:6B:81:D5:71:2B:29:97:37:87:8F:C6:F6:43:D1
ValidityWed, 26 Mar 2025 00:00:00 GMT - Thu, 26 Mar 2026 23:59:59 GMT

File type
PDF document, version 1.4, 0 page(s)
Size
35 kB (34848 bytes)
Hash
a9d695e117fc5daf561a8cbf92d89023
0f757ec2d37f501ed75db971035f50540873a798
7d8f820d6edbf70d94ba35829c265c5f7ee922808d24dd5a8915d996b468fe0b

Detections

Analyzer	Verdict	Alert
VirusTotal	malicious	VirusTotal - Scan result 15/59

HTTP Headers

GET /uploaded_files/userfiles/files/cool-free-items-in-roblox_GM431946152.pdf HTTP/1.1
Host: www.alldaymedicines.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 03 May 2025 14:51:31 GMT
Server: Apache
Last-Modified: Sun, 20 Jun 2021 15:30:32 GMT
Accept-Ranges: bytes
Content-Length: 34848
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/pdf

www.alldaymedicines.com/favicon.ico

54.251.3.164

200 OK

15 kB

URL GET
www.alldaymedicines.com/favicon.ico
IP
54.251.3.164:443
ASN
#16509 AMAZON-02

Requested by
resource://pdf.js/web/viewer.html
Certificate
IssuerSectigo Limited
Subjectwww.alldaymedicines.com
Fingerprint6C:67:88:F9:6D:9B:6B:81:D5:71:2B:29:97:37:87:8F:C6:F6:43:D1
ValidityWed, 26 Mar 2025 00:00:00 GMT - Thu, 26 Mar 2026 23:59:59 GMT

File type
MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Size
15 kB (15086 bytes)
Hash
472dc1a811873d7b62c2a9dcabcddd6d
1a390174dd605f73327a5b9d8cdcb1a8e9a65b38
29ad7437ba6d0f7c6469fd933d7b0b05cfd790854e458a72d3ab8e9bbca86c6e

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: www.alldaymedicines.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.alldaymedicines.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 03 May 2025 14:51:32 GMT
Server: Apache
Last-Modified: Wed, 26 Dec 2018 11:02:43 GMT
Accept-Ranges: bytes
Content-Length: 15086
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/x-icon

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Detections

PDF Document detected

PDF Overview

URLs Found

JavaScript (0)

HTTP Transactions (2)

URL User Request GET

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers