lolila.net
Classification: Malicious
lolila.net is a malicious hostname. Linked to Ursnif malware. Reported by ThreatFox Abuse.ch (Gozi), last seen 2023-09-29.
Current activity
- Online — resolving/reachable. Last checked 2026-10-17 16:38:21.
MITRE ATT&CK associations
Malware families: URSNIF (S0386)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Gozi | ThreatFox Abuse.ch | 2023-09-27 21:01:55 | 2023-09-29 20:20:23 | malicious-activity | S0386 Ursnif |
Tags
c2 gozi historicalandnew rat crm gozi crm papras snifula ursnifIP addresses resolved by this hostname
- 91.195.240.12 (2023-11-24 12:23:41)
- 8.219.122.141 (2023-10-21 01:35:27)
- 2600:1900:4001:96e:8000:1:c54a:1ef (2026-10-17 16:38:21)
- 34.41.139.193 (2026-10-17 16:38:21)
Whois information
- AS name
- AS3356 Level 3 Communications, Inc.
- Domain
- lolila.net
- TLD
- net
- DNSSEC
- ['unsigned']
- Nameservers
- NS1.HWRN.NET, NS2.HWRN.NET
- Registrant
- Dynadot Inc
- Contact email
- [email protected]
- Domain created
- 2026-08-12 04:06:15
- Domain expires
- 2027-08-12 04:06:15
- First indexed
- 2023-09-27 22:18:02
- Last updated
- 2026-10-17 16:38:21