Domain > sodra.lt

More information on this domain is in AlienVault OTX

Files that talk to sodra.lt

MD5	A/V
41530fef2d18802b83fe7d7a74dbbc3a	[HW32.CDB.Cd5f] [Trojan.Bicololo.r3] [WS.Reputation.1] [Kryptik.CDQY] [UnclassifiedMalware] [BackDoor.Slym.13873] [Heuristic.LooksLike.Win32.Suspicious.E] [Backdoor:Win32/Kelihos.F] [W32/Trojan.TTOL-6481] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Win32.SuspectCrc] [Crypt_s.GNC] [Trojan.Win32.Kryptik.CBCJ]

DNS Resolutions

Date	IP Address
2023-10-25	104.18.19.49 (ClassC)
2024-01-11	104.18.18.49 (ClassC)
2024-05-10	104.18.34.141 (ClassC)
2024-06-16	172.64.153.115 (ClassC)
2025-12-31	104.18.23.137 (ClassC)
2026-02-17	104.18.22.137 (ClassC)

HTTP/1.1 403 ForbiddenDate: Thu, 10 Aug 2023 20:48:37 GMTContent-Type: text/html; charsetUTF-8Transfer-Encoding: chunkedConnection: closeCross-Origin-Embedder-Policy: require-corpCross-Origin-Opener-P

!DOCTYPE html>html langen-US>head>title>Just a moment.../title>meta http-equivContent-Type contenttext/html; charsetUTF-8>meta http-equivX-UA-Compatible contentIEEdge>meta namerobots contentnoindex,nofollow>meta nameviewport contentwidthdevice-width,initial-scale1>link href/cdn-cgi/styles/challenges.css relstylesheet>meta http-equivrefresh content35>/head>body classno-js>div classmain-wrapper rolemain>div classmain-content>noscript>div idchallenge-error-title>div classh2>span classicon-wrapper>div classheading-icon warning-icon>/div>/span>span idchallenge-error-text>Enable JavaScript and cookies to continue/span>/div>/div>/noscript>/div>/div>script>(function(){window._cf_chl_opt{cvId: 2,cZone: sodra.lt,cType: non-interactive,cNounce: 877,cRay: 7f4b19cc3e25c680,cHash: 51a8ce6642e3f77,cUPMDTk: /?__cf_chl_tkJH2VzyFoYrmuXKz.GS.3KBaqiBe8Y4eKUMaAzqfuq3Q-1691700517-0-gaNycGzNBHs,cFPWv: b,cTTimeMs: 1000,cMTimeMs: 60000,cTplV: 5,cTplB: cf,cK: ,fa: /?__cf_chl_f_tkJH2VzyFoYrmuXKz.GS.3KBaqiBe8Y4eKUMaAzqfuq3Q-1691700517-0-gaNycGzNBHs,md: f5UfMEaZ81HnR3fkDy4SYAZSUtxKFT1j1WHEXBHJl7M-1691700517-0-ATIndQzRLTDDV0sZ9BjTyJ95vxNQQd_7UTpKQNYPEH_J1Fr3KlO1ZrKDGil9oxZmCpe0t_v-O-y44-Eanug3Ul8G8LJFwPhus9sn1DvJ6okeELlvU--KUq_jLcz8s3_4Rk3XEwRz5_h0c88zXojnsJnVgySN78-Ul-4MsUZsx7FgwTnxD4t0_eDMHb_EQBuwzbYZd1y3SMrR3Z9GmAesnaj7Z6AQhjGMahfUSNBuWQGzZwUZGKsos9U95Lr9b0WrNr993OpC6aEzrbJmDzDsPu2tXlz8dyV2zk3cEMMdDK-vjDWMBuPgFkxDBwc1pN41QxLBq6L6zxp0JEt_fflagS1uvl83yhqZIzPUNoDgz9b8jOgGJhHuEU8l7VgcRjY-v88KUoVxOzuScuLf1b6MIPsdSPA6Oy7BThqNyo1hvs9bxBktnjghGz7DmTLIsvdW8cx5KeNUMcrZYAShR3bDmMC_mHowXCqnyetDaO1jGMLeK8LaHGei4hsEs8AGhLeiOFHhJmfV3XK61pjxYKko5ifVgMvuB49Jq1UVNik7KU3tgH3EjiE1DxqWs4yd6yPdRTjldG1kuJUDoE1SpBKHRe5C-HO6fVUINWeNvV1CT1npF33E0CO70A5fyqUrpT0mHpc79q1366OctOFPiKL33_i-AopNyScp9D4EjXzKysfpWkBmVOEGDxo169B0Oo7gbNkLuoR62DaIw2ajw-Uh8W70HA_kSgIw-emV2Z-bbEllNm3kFihNvFp6SWyzxF4UYgBDbX8SUfJANtM5U8LEASsyQe3vX7HPejmAMR4lNrQPsdvM5rDHioSBAFHokT6UhBlLo0qk3OIGYS88Fmk1U5EsMlmW58dEFmxPPAE_NjfjF8MX3JI3hlAXfLjYwtU0q_G5dIlJyYdkpbqmBwO5dtSO84ArVW77g_LXdhTSVoWbbATuW8k8et

Port 443

!DOCTYPE html>html langen-US>head>title>Just a moment.../title>meta http-equivContent-Type contenttext/html; charsetUTF-8>meta http-equivX-UA-Compatible contentIEEdge>meta namerobots contentnoindex,nofollow>meta nameviewport contentwidthdevice-width,initial-scale1>link href/cdn-cgi/styles/challenges.css relstylesheet>meta http-equivrefresh content35>/head>body classno-js>div classmain-wrapper rolemain>div classmain-content>noscript>div idchallenge-error-title>div classh2>span classicon-wrapper>div classheading-icon warning-icon>/div>/span>span idchallenge-error-text>Enable JavaScript and cookies to continue/span>/div>/div>/noscript>/div>/div>script>(function(){window._cf_chl_opt{cvId: 2,cZone: sodra.lt,cType: non-interactive,cNounce: 82664,cRay: 7f4b19ccacdbc66c,cHash: 8f172817c208b40,cUPMDTk: /?__cf_chl_tkcjmOp8BAbocd6TJz01uF3XgUiuAy1WTPjKdRHUvd8Y8-1691700517-0-gaNycGzNB6U,cFPWv: b,cTTimeMs: 1000,cMTimeMs: 60000,cTplV: 5,cTplB: cf,cK: ,fa: /?__cf_chl_f_tkcjmOp8BAbocd6TJz01uF3XgUiuAy1WTPjKdRHUvd8Y8-1691700517-0-gaNycGzNB6U,md: wDX1f03.mVsa3Pt1_p2wCLuecf4O7If7_ng0NNOX_NE-1691700517-0-Ab4Pf59Yi-hY4HcaE3m1pUfylDpRdres6XFqYr4q7eHXx0d2xlzAVyAjyKRt1SBnCFlPw8VYF3yE90p3mOiKHP-Jl-HbyUnRj-rRZtVXiQEY1G_lnszjQjSflLWbeoSCCX42N7WtpUediGb33qc7ttAC8zA3XLGqiSlNGhgyuA-1KgQtlj08UF7viKhcP4gBlQYoQWWrPMCFTS5Ps2a_jxLAjj7FdXTPdK1vE20qrWotF5aW-ddg3uJYfK3fiNfP6b_-MZBwHGk5EPEqOoM_eTYJnixofpEqA_JSOG-qbV7mtXM9qNeYjhFvI6oGblm7YBk9G4voQKXvnNOvWTKZ6lG6ouuLIXg2aGd3X6PVI7Yk1mSTeSIKw8JT_c8L-ZBGa-yBotoEzAsKXylBNZh6J4Jh4ZrO8WwO62kmZ07sWVI0aPHfWyZx0GiDcZx3VDjlYODyTwKjvuR-RXwOSzwFI0kIMU9Em-iYr-268TlNbEagZG9F30BvX4lhJnKmQq4CAa_sae7tM8-lb1m_4pcrQdOO-1QG0Ge7aE3xq50VPeyp1M1_lFKTMdTtmn9_FMf0l9CsHqDab-JC2QxTt5r88nfgy59VbXBH-Dgqd_u_dOQjdqND9h_YRhC3ucurZTZy-jJXm2VkKyytQqyibQvh-g-PwQMg5LKprOTth4yZ51deII_PtwAZGb3CnJcfZvVg-OeHeoVEqIAQ4YRfHpH-2ko_zzx_GpPiOHsntU-z6FKToshA3BC44y_r34jA4nYK22gFM4jyLl6SWvB5HUqff0zFHE4pTI0nVEqGlBOzc-4ue2I_MNj2vvqQ5tWZ9WE9RhsjoxtrOLyqUWqhrae-63B-t_6JKT4F5z5Z6TmTpMUYjJpyHuj6km_YkADSaCIOANugzHqJQwgTEmZ5MHCqa0HTkCO7vZshl1enykngYl2M3Gs9nE1I

Subdomains

Date	Domain	IP
atvira.sodra.lt	2024-06-16	172.64.153.115
draudejai.sodra.lt	2025-12-03	104.18.22.137
www.draudejai.sodra.lt	2025-09-09	104.18.22.137
www.sodra.lt	2025-03-22	104.18.22.137

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > sodra.lt

Is this malicious?

Files that talk to sodra.lt

DNS Resolutions

Port 80

Port 443

Subdomains