ThreatFox IOC Database

You are viewing the ThreatFox database entry for url https://notionz.qpon/api.

Database Entry


IOC ID:1640991
IOC: https://notionz.qpon/api
IOC Type :url
Threat Type :botnet_cc
Malware: Lumma Stealer
Malware alias:LummaC2 Stealer
Confidence Level : Confidence level is elevated (75%)
ASN:AS14061 DIGITALOCEAN-ASN
Country:- US
First seen:2025-11-13 20:45:41 UTC
Last seen:2025-12-12 18:37:47 UTC
UUID:b7c0f865-c0d1-11f0-ad21-42010aa4000a
Reporter abuse_ch
Reward 5 credits from ThreatFox
Tags:Lumma
Reference: https://bazaar.abuse.ch/sample/5cb1c92c11f7cfb5534d4db9ed14fbe12d0342d2f517390444fd0db61a66da1c/

Avatar
abuse_ch
lumma (aka LummaC2 Stealer) botnet C2