A small tool to view real-world ActivityPub objects as JSON! Enter a URL
or username from Mastodon or a similar service below, and we'll send a
request with
the right
Accept
header
to the server to view the underlying object.
{
"@context": [
"https://www.w3.org/ns/activitystreams",
{
"ostatus": "http://ostatus.org#",
"atomUri": "ostatus:atomUri",
"inReplyToAtomUri": "ostatus:inReplyToAtomUri",
"conversation": "ostatus:conversation",
"sensitive": "as:sensitive",
"toot": "http://joinmastodon.org/ns#",
"votersCount": "toot:votersCount",
"litepub": "http://litepub.social/ns#",
"directMessage": "litepub:directMessage",
"Hashtag": "as:Hashtag"
}
],
"id": "https://infosec.exchange/users/ScumBots/outbox?min_id=0&page=true",
"type": "OrderedCollectionPage",
"next": "https://infosec.exchange/users/ScumBots/outbox?max_id=113453332752857828&page=true",
"prev": "https://infosec.exchange/users/ScumBots/outbox?min_id=113453392322440877&page=true",
"partOf": "https://infosec.exchange/users/ScumBots/outbox",
"orderedItems": [
{
"id": "https://infosec.exchange/users/ScumBots/statuses/113453392322440877/activity",
"type": "Create",
"actor": "https://infosec.exchange/users/ScumBots",
"published": "2024-11-09T14:09:41Z",
"to": [
"https://www.w3.org/ns/activitystreams#Public"
],
"cc": [
"https://infosec.exchange/users/ScumBots/followers"
],
"object": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113453392322440877",
"type": "Note",
"summary": null,
"inReplyTo": null,
"published": "2024-11-09T14:09:41Z",
"url": "https://infosec.exchange/@ScumBots/113453392322440877",
"attributedTo": "https://infosec.exchange/users/ScumBots",
"to": [
"https://www.w3.org/ns/activitystreams#Public"
],
"cc": [
"https://infosec.exchange/users/ScumBots/followers"
],
"sensitive": false,
"atomUri": "https://infosec.exchange/users/ScumBots/statuses/113453392322440877",
"inReplyToAtomUri": null,
"conversation": "tag:infosec.exchange,2024-11-09:objectId=211419965:objectType=Conversation",
"content": "<p><a href=\"https://infosec.exchange/tags/StagedC2\" class=\"mention hashtag\" rel=\"tag\">#<span>StagedC2</span></a> config observed at Thu Nov 7 00:30:10 2024 UTC, located at hXXps://pastebin[.]com/raw/hHx1TpPE C2: 194[.]59[.]31[.]34:6969</p>",
"contentMap": {
"en": "<p><a href=\"https://infosec.exchange/tags/StagedC2\" class=\"mention hashtag\" rel=\"tag\">#<span>StagedC2</span></a> config observed at Thu Nov 7 00:30:10 2024 UTC, located at hXXps://pastebin[.]com/raw/hHx1TpPE C2: 194[.]59[.]31[.]34:6969</p>"
},
"attachment": [],
"tag": [
{
"type": "Hashtag",
"href": "https://infosec.exchange/tags/stagedc2",
"name": "#stagedc2"
}
],
"replies": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113453392322440877/replies",
"type": "Collection",
"first": {
"type": "CollectionPage",
"next": "https://infosec.exchange/users/ScumBots/statuses/113453392322440877/replies?only_other_accounts=true&page=true",
"partOf": "https://infosec.exchange/users/ScumBots/statuses/113453392322440877/replies",
"items": []
}
},
"likes": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113453392322440877/likes",
"type": "Collection",
"totalItems": 0
},
"shares": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113453392322440877/shares",
"type": "Collection",
"totalItems": 0
}
}
},
{
"id": "https://infosec.exchange/users/ScumBots/statuses/113453390179432675/activity",
"type": "Create",
"actor": "https://infosec.exchange/users/ScumBots",
"published": "2024-11-09T14:09:09Z",
"to": [
"https://www.w3.org/ns/activitystreams#Public"
],
"cc": [
"https://infosec.exchange/users/ScumBots/followers"
],
"object": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113453390179432675",
"type": "Note",
"summary": null,
"inReplyTo": null,
"published": "2024-11-09T14:09:09Z",
"url": "https://infosec.exchange/@ScumBots/113453390179432675",
"attributedTo": "https://infosec.exchange/users/ScumBots",
"to": [
"https://www.w3.org/ns/activitystreams#Public"
],
"cc": [
"https://infosec.exchange/users/ScumBots/followers"
],
"sensitive": false,
"atomUri": "https://infosec.exchange/users/ScumBots/statuses/113453390179432675",
"inReplyToAtomUri": null,
"conversation": "tag:infosec.exchange,2024-11-09:objectId=211419827:objectType=Conversation",
"content": "<p><a href=\"https://infosec.exchange/tags/StagedC2\" class=\"mention hashtag\" rel=\"tag\">#<span>StagedC2</span></a> config observed at Fri Nov 8 21:36:17 2024 UTC, located at hXXps://pastebin[.]com/raw/RMBN1Urx C2: natural-candy[.]gl[.]at[.]ply[.]gg:51104 (IP: 147.185.221.23)</p>",
"contentMap": {
"en": "<p><a href=\"https://infosec.exchange/tags/StagedC2\" class=\"mention hashtag\" rel=\"tag\">#<span>StagedC2</span></a> config observed at Fri Nov 8 21:36:17 2024 UTC, located at hXXps://pastebin[.]com/raw/RMBN1Urx C2: natural-candy[.]gl[.]at[.]ply[.]gg:51104 (IP: 147.185.221.23)</p>"
},
"attachment": [],
"tag": [
{
"type": "Hashtag",
"href": "https://infosec.exchange/tags/stagedc2",
"name": "#stagedc2"
}
],
"replies": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113453390179432675/replies",
"type": "Collection",
"first": {
"type": "CollectionPage",
"next": "https://infosec.exchange/users/ScumBots/statuses/113453390179432675/replies?only_other_accounts=true&page=true",
"partOf": "https://infosec.exchange/users/ScumBots/statuses/113453390179432675/replies",
"items": []
}
},
"likes": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113453390179432675/likes",
"type": "Collection",
"totalItems": 0
},
"shares": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113453390179432675/shares",
"type": "Collection",
"totalItems": 0
}
}
},
{
"id": "https://infosec.exchange/users/ScumBots/statuses/113453386090816905/activity",
"type": "Create",
"actor": "https://infosec.exchange/users/ScumBots",
"published": "2024-11-09T14:08:06Z",
"to": [
"https://www.w3.org/ns/activitystreams#Public"
],
"cc": [
"https://infosec.exchange/users/ScumBots/followers"
],
"object": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113453386090816905",
"type": "Note",
"summary": null,
"inReplyTo": null,
"published": "2024-11-09T14:08:06Z",
"url": "https://infosec.exchange/@ScumBots/113453386090816905",
"attributedTo": "https://infosec.exchange/users/ScumBots",
"to": [
"https://www.w3.org/ns/activitystreams#Public"
],
"cc": [
"https://infosec.exchange/users/ScumBots/followers"
],
"sensitive": false,
"atomUri": "https://infosec.exchange/users/ScumBots/statuses/113453386090816905",
"inReplyToAtomUri": null,
"conversation": "tag:infosec.exchange,2024-11-09:objectId=211419578:objectType=Conversation",
"content": "<p><a href=\"https://infosec.exchange/tags/StagedC2\" class=\"mention hashtag\" rel=\"tag\">#<span>StagedC2</span></a> config observed at Sat Nov 9 11:36:24 2024 UTC, located at hXXps://pastebin[.]com/raw/4zJvJydV C2: ring-charm[.]gl[.]at[.]ply[.]gg:45883 (IP: 147.185.221.22)</p>",
"contentMap": {
"en": "<p><a href=\"https://infosec.exchange/tags/StagedC2\" class=\"mention hashtag\" rel=\"tag\">#<span>StagedC2</span></a> config observed at Sat Nov 9 11:36:24 2024 UTC, located at hXXps://pastebin[.]com/raw/4zJvJydV C2: ring-charm[.]gl[.]at[.]ply[.]gg:45883 (IP: 147.185.221.22)</p>"
},
"attachment": [],
"tag": [
{
"type": "Hashtag",
"href": "https://infosec.exchange/tags/stagedc2",
"name": "#stagedc2"
}
],
"replies": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113453386090816905/replies",
"type": "Collection",
"first": {
"type": "CollectionPage",
"next": "https://infosec.exchange/users/ScumBots/statuses/113453386090816905/replies?only_other_accounts=true&page=true",
"partOf": "https://infosec.exchange/users/ScumBots/statuses/113453386090816905/replies",
"items": []
}
},
"likes": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113453386090816905/likes",
"type": "Collection",
"totalItems": 0
},
"shares": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113453386090816905/shares",
"type": "Collection",
"totalItems": 0
}
}
},
{
"id": "https://infosec.exchange/users/ScumBots/statuses/113453382013324580/activity",
"type": "Create",
"actor": "https://infosec.exchange/users/ScumBots",
"published": "2024-11-09T14:07:04Z",
"to": [
"https://www.w3.org/ns/activitystreams#Public"
],
"cc": [
"https://infosec.exchange/users/ScumBots/followers"
],
"object": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113453382013324580",
"type": "Note",
"summary": null,
"inReplyTo": null,
"published": "2024-11-09T14:07:04Z",
"url": "https://infosec.exchange/@ScumBots/113453382013324580",
"attributedTo": "https://infosec.exchange/users/ScumBots",
"to": [
"https://www.w3.org/ns/activitystreams#Public"
],
"cc": [
"https://infosec.exchange/users/ScumBots/followers"
],
"sensitive": false,
"atomUri": "https://infosec.exchange/users/ScumBots/statuses/113453382013324580",
"inReplyToAtomUri": null,
"conversation": "tag:infosec.exchange,2024-11-09:objectId=211419308:objectType=Conversation",
"content": "<p><a href=\"https://infosec.exchange/tags/StagedC2\" class=\"mention hashtag\" rel=\"tag\">#<span>StagedC2</span></a> config observed at Sat Nov 9 07:53:12 2024 UTC, located at hXXps://pastebin[.]com/raw/Y0kxdXeQ C2: 2[.]tcp[.]eu[.]ngrok[.]io:18025 (IP: 3.127.138.57)</p>",
"contentMap": {
"en": "<p><a href=\"https://infosec.exchange/tags/StagedC2\" class=\"mention hashtag\" rel=\"tag\">#<span>StagedC2</span></a> config observed at Sat Nov 9 07:53:12 2024 UTC, located at hXXps://pastebin[.]com/raw/Y0kxdXeQ C2: 2[.]tcp[.]eu[.]ngrok[.]io:18025 (IP: 3.127.138.57)</p>"
},
"attachment": [],
"tag": [
{
"type": "Hashtag",
"href": "https://infosec.exchange/tags/stagedc2",
"name": "#stagedc2"
}
],
"replies": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113453382013324580/replies",
"type": "Collection",
"first": {
"type": "CollectionPage",
"next": "https://infosec.exchange/users/ScumBots/statuses/113453382013324580/replies?only_other_accounts=true&page=true",
"partOf": "https://infosec.exchange/users/ScumBots/statuses/113453382013324580/replies",
"items": []
}
},
"likes": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113453382013324580/likes",
"type": "Collection",
"totalItems": 0
},
"shares": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113453382013324580/shares",
"type": "Collection",
"totalItems": 0
}
}
},
{
"id": "https://infosec.exchange/users/ScumBots/statuses/113453377949200346/activity",
"type": "Create",
"actor": "https://infosec.exchange/users/ScumBots",
"published": "2024-11-09T14:06:02Z",
"to": [
"https://www.w3.org/ns/activitystreams#Public"
],
"cc": [
"https://infosec.exchange/users/ScumBots/followers"
],
"object": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113453377949200346",
"type": "Note",
"summary": null,
"inReplyTo": null,
"published": "2024-11-09T14:06:02Z",
"url": "https://infosec.exchange/@ScumBots/113453377949200346",
"attributedTo": "https://infosec.exchange/users/ScumBots",
"to": [
"https://www.w3.org/ns/activitystreams#Public"
],
"cc": [
"https://infosec.exchange/users/ScumBots/followers"
],
"sensitive": false,
"atomUri": "https://infosec.exchange/users/ScumBots/statuses/113453377949200346",
"inReplyToAtomUri": null,
"conversation": "tag:infosec.exchange,2024-11-09:objectId=211419062:objectType=Conversation",
"content": "<p><a href=\"https://infosec.exchange/tags/StagedC2\" class=\"mention hashtag\" rel=\"tag\">#<span>StagedC2</span></a> config observed at Fri Nov 8 21:19:11 2024 UTC, located at hXXps://pastebin[.]com/raw/jLLyfK6g C2: stvdj3y[.]localto[.]net:7669 (IP: 162.212.154.8)</p>",
"contentMap": {
"en": "<p><a href=\"https://infosec.exchange/tags/StagedC2\" class=\"mention hashtag\" rel=\"tag\">#<span>StagedC2</span></a> config observed at Fri Nov 8 21:19:11 2024 UTC, located at hXXps://pastebin[.]com/raw/jLLyfK6g C2: stvdj3y[.]localto[.]net:7669 (IP: 162.212.154.8)</p>"
},
"attachment": [],
"tag": [
{
"type": "Hashtag",
"href": "https://infosec.exchange/tags/stagedc2",
"name": "#stagedc2"
}
],
"replies": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113453377949200346/replies",
"type": "Collection",
"first": {
"type": "CollectionPage",
"next": "https://infosec.exchange/users/ScumBots/statuses/113453377949200346/replies?only_other_accounts=true&page=true",
"partOf": "https://infosec.exchange/users/ScumBots/statuses/113453377949200346/replies",
"items": []
}
},
"likes": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113453377949200346/likes",
"type": "Collection",
"totalItems": 0
},
"shares": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113453377949200346/shares",
"type": "Collection",
"totalItems": 0
}
}
},
{
"id": "https://infosec.exchange/users/ScumBots/statuses/113453373851629742/activity",
"type": "Create",
"actor": "https://infosec.exchange/users/ScumBots",
"published": "2024-11-09T14:05:00Z",
"to": [
"https://www.w3.org/ns/activitystreams#Public"
],
"cc": [
"https://infosec.exchange/users/ScumBots/followers"
],
"object": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113453373851629742",
"type": "Note",
"summary": null,
"inReplyTo": null,
"published": "2024-11-09T14:05:00Z",
"url": "https://infosec.exchange/@ScumBots/113453373851629742",
"attributedTo": "https://infosec.exchange/users/ScumBots",
"to": [
"https://www.w3.org/ns/activitystreams#Public"
],
"cc": [
"https://infosec.exchange/users/ScumBots/followers"
],
"sensitive": false,
"atomUri": "https://infosec.exchange/users/ScumBots/statuses/113453373851629742",
"inReplyToAtomUri": null,
"conversation": "tag:infosec.exchange,2024-11-09:objectId=211418777:objectType=Conversation",
"content": "<p><a href=\"https://infosec.exchange/tags/StagedC2\" class=\"mention hashtag\" rel=\"tag\">#<span>StagedC2</span></a> config observed at Sat Nov 9 13:20:04 2024 UTC, located at hXXps://pastebin[.]com/raw/FkqWGkNJ C2: 88[.]70[.]237[.]233:443</p>",
"contentMap": {
"en": "<p><a href=\"https://infosec.exchange/tags/StagedC2\" class=\"mention hashtag\" rel=\"tag\">#<span>StagedC2</span></a> config observed at Sat Nov 9 13:20:04 2024 UTC, located at hXXps://pastebin[.]com/raw/FkqWGkNJ C2: 88[.]70[.]237[.]233:443</p>"
},
"attachment": [],
"tag": [
{
"type": "Hashtag",
"href": "https://infosec.exchange/tags/stagedc2",
"name": "#stagedc2"
}
],
"replies": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113453373851629742/replies",
"type": "Collection",
"first": {
"type": "CollectionPage",
"next": "https://infosec.exchange/users/ScumBots/statuses/113453373851629742/replies?only_other_accounts=true&page=true",
"partOf": "https://infosec.exchange/users/ScumBots/statuses/113453373851629742/replies",
"items": []
}
},
"likes": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113453373851629742/likes",
"type": "Collection",
"totalItems": 0
},
"shares": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113453373851629742/shares",
"type": "Collection",
"totalItems": 0
}
}
},
{
"id": "https://infosec.exchange/users/ScumBots/statuses/113453371789658224/activity",
"type": "Create",
"actor": "https://infosec.exchange/users/ScumBots",
"published": "2024-11-09T14:04:28Z",
"to": [
"https://www.w3.org/ns/activitystreams#Public"
],
"cc": [
"https://infosec.exchange/users/ScumBots/followers"
],
"object": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113453371789658224",
"type": "Note",
"summary": null,
"inReplyTo": null,
"published": "2024-11-09T14:04:28Z",
"url": "https://infosec.exchange/@ScumBots/113453371789658224",
"attributedTo": "https://infosec.exchange/users/ScumBots",
"to": [
"https://www.w3.org/ns/activitystreams#Public"
],
"cc": [
"https://infosec.exchange/users/ScumBots/followers"
],
"sensitive": false,
"atomUri": "https://infosec.exchange/users/ScumBots/statuses/113453371789658224",
"inReplyToAtomUri": null,
"conversation": "tag:infosec.exchange,2024-11-09:objectId=211418645:objectType=Conversation",
"content": "<p><a href=\"https://infosec.exchange/tags/StagedC2\" class=\"mention hashtag\" rel=\"tag\">#<span>StagedC2</span></a> config observed at Sat Nov 9 06:06:09 2024 UTC, located at hXXps://pastebin[.]com/raw/5gHVTwMX C2: form-omaha[.]gl[.]at[.]ply[.]gg:50357 (IP: 147.185.221.23)</p>",
"contentMap": {
"en": "<p><a href=\"https://infosec.exchange/tags/StagedC2\" class=\"mention hashtag\" rel=\"tag\">#<span>StagedC2</span></a> config observed at Sat Nov 9 06:06:09 2024 UTC, located at hXXps://pastebin[.]com/raw/5gHVTwMX C2: form-omaha[.]gl[.]at[.]ply[.]gg:50357 (IP: 147.185.221.23)</p>"
},
"attachment": [],
"tag": [
{
"type": "Hashtag",
"href": "https://infosec.exchange/tags/stagedc2",
"name": "#stagedc2"
}
],
"replies": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113453371789658224/replies",
"type": "Collection",
"first": {
"type": "CollectionPage",
"next": "https://infosec.exchange/users/ScumBots/statuses/113453371789658224/replies?only_other_accounts=true&page=true",
"partOf": "https://infosec.exchange/users/ScumBots/statuses/113453371789658224/replies",
"items": []
}
},
"likes": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113453371789658224/likes",
"type": "Collection",
"totalItems": 0
},
"shares": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113453371789658224/shares",
"type": "Collection",
"totalItems": 0
}
}
},
{
"id": "https://infosec.exchange/users/ScumBots/statuses/113453367599809484/activity",
"type": "Create",
"actor": "https://infosec.exchange/users/ScumBots",
"published": "2024-11-09T14:03:24Z",
"to": [
"https://www.w3.org/ns/activitystreams#Public"
],
"cc": [
"https://infosec.exchange/users/ScumBots/followers"
],
"object": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113453367599809484",
"type": "Note",
"summary": null,
"inReplyTo": null,
"published": "2024-11-09T14:03:24Z",
"url": "https://infosec.exchange/@ScumBots/113453367599809484",
"attributedTo": "https://infosec.exchange/users/ScumBots",
"to": [
"https://www.w3.org/ns/activitystreams#Public"
],
"cc": [
"https://infosec.exchange/users/ScumBots/followers"
],
"sensitive": false,
"atomUri": "https://infosec.exchange/users/ScumBots/statuses/113453367599809484",
"inReplyToAtomUri": null,
"conversation": "tag:infosec.exchange,2024-11-09:objectId=211418342:objectType=Conversation",
"content": "<p><a href=\"https://infosec.exchange/tags/StagedC2\" class=\"mention hashtag\" rel=\"tag\">#<span>StagedC2</span></a> config observed at Fri Nov 8 00:00:17 2024 UTC, located at hXXps://pastebin[.]com/raw/vCyzjfkE C2: 147[.]185[.]221[.]17:43648</p>",
"contentMap": {
"en": "<p><a href=\"https://infosec.exchange/tags/StagedC2\" class=\"mention hashtag\" rel=\"tag\">#<span>StagedC2</span></a> config observed at Fri Nov 8 00:00:17 2024 UTC, located at hXXps://pastebin[.]com/raw/vCyzjfkE C2: 147[.]185[.]221[.]17:43648</p>"
},
"attachment": [],
"tag": [
{
"type": "Hashtag",
"href": "https://infosec.exchange/tags/stagedc2",
"name": "#stagedc2"
}
],
"replies": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113453367599809484/replies",
"type": "Collection",
"first": {
"type": "CollectionPage",
"next": "https://infosec.exchange/users/ScumBots/statuses/113453367599809484/replies?only_other_accounts=true&page=true",
"partOf": "https://infosec.exchange/users/ScumBots/statuses/113453367599809484/replies",
"items": []
}
},
"likes": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113453367599809484/likes",
"type": "Collection",
"totalItems": 0
},
"shares": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113453367599809484/shares",
"type": "Collection",
"totalItems": 0
}
}
},
{
"id": "https://infosec.exchange/users/ScumBots/statuses/113453365546505482/activity",
"type": "Create",
"actor": "https://infosec.exchange/users/ScumBots",
"published": "2024-11-09T14:02:53Z",
"to": [
"https://www.w3.org/ns/activitystreams#Public"
],
"cc": [
"https://infosec.exchange/users/ScumBots/followers"
],
"object": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113453365546505482",
"type": "Note",
"summary": null,
"inReplyTo": null,
"published": "2024-11-09T14:02:53Z",
"url": "https://infosec.exchange/@ScumBots/113453365546505482",
"attributedTo": "https://infosec.exchange/users/ScumBots",
"to": [
"https://www.w3.org/ns/activitystreams#Public"
],
"cc": [
"https://infosec.exchange/users/ScumBots/followers"
],
"sensitive": false,
"atomUri": "https://infosec.exchange/users/ScumBots/statuses/113453365546505482",
"inReplyToAtomUri": null,
"conversation": "tag:infosec.exchange,2024-11-09:objectId=211418186:objectType=Conversation",
"content": "<p><a href=\"https://infosec.exchange/tags/StagedC2\" class=\"mention hashtag\" rel=\"tag\">#<span>StagedC2</span></a> config observed at Fri Nov 8 13:05:19 2024 UTC, located at hXXps://pastebin[.]com/raw/TEB4eEUJ C2: 51[.]75[.]145[.]220:443</p>",
"contentMap": {
"en": "<p><a href=\"https://infosec.exchange/tags/StagedC2\" class=\"mention hashtag\" rel=\"tag\">#<span>StagedC2</span></a> config observed at Fri Nov 8 13:05:19 2024 UTC, located at hXXps://pastebin[.]com/raw/TEB4eEUJ C2: 51[.]75[.]145[.]220:443</p>"
},
"attachment": [],
"tag": [
{
"type": "Hashtag",
"href": "https://infosec.exchange/tags/stagedc2",
"name": "#stagedc2"
}
],
"replies": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113453365546505482/replies",
"type": "Collection",
"first": {
"type": "CollectionPage",
"next": "https://infosec.exchange/users/ScumBots/statuses/113453365546505482/replies?only_other_accounts=true&page=true",
"partOf": "https://infosec.exchange/users/ScumBots/statuses/113453365546505482/replies",
"items": []
}
},
"likes": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113453365546505482/likes",
"type": "Collection",
"totalItems": 0
},
"shares": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113453365546505482/shares",
"type": "Collection",
"totalItems": 0
}
}
},
{
"id": "https://infosec.exchange/users/ScumBots/statuses/113453363473333766/activity",
"type": "Create",
"actor": "https://infosec.exchange/users/ScumBots",
"published": "2024-11-09T14:02:21Z",
"to": [
"https://www.w3.org/ns/activitystreams#Public"
],
"cc": [
"https://infosec.exchange/users/ScumBots/followers"
],
"object": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113453363473333766",
"type": "Note",
"summary": null,
"inReplyTo": null,
"published": "2024-11-09T14:02:21Z",
"url": "https://infosec.exchange/@ScumBots/113453363473333766",
"attributedTo": "https://infosec.exchange/users/ScumBots",
"to": [
"https://www.w3.org/ns/activitystreams#Public"
],
"cc": [
"https://infosec.exchange/users/ScumBots/followers"
],
"sensitive": false,
"atomUri": "https://infosec.exchange/users/ScumBots/statuses/113453363473333766",
"inReplyToAtomUri": null,
"conversation": "tag:infosec.exchange,2024-11-09:objectId=211418060:objectType=Conversation",
"content": "<p><a href=\"https://infosec.exchange/tags/StagedC2\" class=\"mention hashtag\" rel=\"tag\">#<span>StagedC2</span></a> config observed at Sat Nov 9 07:48:06 2024 UTC, located at hXXps://pastebin[.]com/raw/hq79CUNB C2: data-las[.]gl[.]at[.]ply[.]gg:1094 (IP: 147.185.221.17)</p>",
"contentMap": {
"en": "<p><a href=\"https://infosec.exchange/tags/StagedC2\" class=\"mention hashtag\" rel=\"tag\">#<span>StagedC2</span></a> config observed at Sat Nov 9 07:48:06 2024 UTC, located at hXXps://pastebin[.]com/raw/hq79CUNB C2: data-las[.]gl[.]at[.]ply[.]gg:1094 (IP: 147.185.221.17)</p>"
},
"attachment": [],
"tag": [
{
"type": "Hashtag",
"href": "https://infosec.exchange/tags/stagedc2",
"name": "#stagedc2"
}
],
"replies": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113453363473333766/replies",
"type": "Collection",
"first": {
"type": "CollectionPage",
"next": "https://infosec.exchange/users/ScumBots/statuses/113453363473333766/replies?only_other_accounts=true&page=true",
"partOf": "https://infosec.exchange/users/ScumBots/statuses/113453363473333766/replies",
"items": []
}
},
"likes": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113453363473333766/likes",
"type": "Collection",
"totalItems": 0
},
"shares": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113453363473333766/shares",
"type": "Collection",
"totalItems": 0
}
}
},
{
"id": "https://infosec.exchange/users/ScumBots/statuses/113453359376677612/activity",
"type": "Create",
"actor": "https://infosec.exchange/users/ScumBots",
"published": "2024-11-09T14:01:19Z",
"to": [
"https://www.w3.org/ns/activitystreams#Public"
],
"cc": [
"https://infosec.exchange/users/ScumBots/followers"
],
"object": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113453359376677612",
"type": "Note",
"summary": null,
"inReplyTo": null,
"published": "2024-11-09T14:01:19Z",
"url": "https://infosec.exchange/@ScumBots/113453359376677612",
"attributedTo": "https://infosec.exchange/users/ScumBots",
"to": [
"https://www.w3.org/ns/activitystreams#Public"
],
"cc": [
"https://infosec.exchange/users/ScumBots/followers"
],
"sensitive": false,
"atomUri": "https://infosec.exchange/users/ScumBots/statuses/113453359376677612",
"inReplyToAtomUri": null,
"conversation": "tag:infosec.exchange,2024-11-09:objectId=211417777:objectType=Conversation",
"content": "<p><a href=\"https://infosec.exchange/tags/StagedC2\" class=\"mention hashtag\" rel=\"tag\">#<span>StagedC2</span></a> config observed at Fri Nov 8 19:24:20 2024 UTC, located at hXXps://pastebin[.]com/raw/td3ZxWVV C2: 2[.]tcp[.]eu[.]ngrok[.]io:11716 (IP: 18.197.239.5)</p>",
"contentMap": {
"en": "<p><a href=\"https://infosec.exchange/tags/StagedC2\" class=\"mention hashtag\" rel=\"tag\">#<span>StagedC2</span></a> config observed at Fri Nov 8 19:24:20 2024 UTC, located at hXXps://pastebin[.]com/raw/td3ZxWVV C2: 2[.]tcp[.]eu[.]ngrok[.]io:11716 (IP: 18.197.239.5)</p>"
},
"attachment": [],
"tag": [
{
"type": "Hashtag",
"href": "https://infosec.exchange/tags/stagedc2",
"name": "#stagedc2"
}
],
"replies": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113453359376677612/replies",
"type": "Collection",
"first": {
"type": "CollectionPage",
"next": "https://infosec.exchange/users/ScumBots/statuses/113453359376677612/replies?only_other_accounts=true&page=true",
"partOf": "https://infosec.exchange/users/ScumBots/statuses/113453359376677612/replies",
"items": []
}
},
"likes": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113453359376677612/likes",
"type": "Collection",
"totalItems": 0
},
"shares": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113453359376677612/shares",
"type": "Collection",
"totalItems": 0
}
}
},
{
"id": "https://infosec.exchange/users/ScumBots/statuses/113453355248356793/activity",
"type": "Create",
"actor": "https://infosec.exchange/users/ScumBots",
"published": "2024-11-09T14:00:16Z",
"to": [
"https://www.w3.org/ns/activitystreams#Public"
],
"cc": [
"https://infosec.exchange/users/ScumBots/followers"
],
"object": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113453355248356793",
"type": "Note",
"summary": null,
"inReplyTo": null,
"published": "2024-11-09T14:00:16Z",
"url": "https://infosec.exchange/@ScumBots/113453355248356793",
"attributedTo": "https://infosec.exchange/users/ScumBots",
"to": [
"https://www.w3.org/ns/activitystreams#Public"
],
"cc": [
"https://infosec.exchange/users/ScumBots/followers"
],
"sensitive": false,
"atomUri": "https://infosec.exchange/users/ScumBots/statuses/113453355248356793",
"inReplyToAtomUri": null,
"conversation": "tag:infosec.exchange,2024-11-09:objectId=211417476:objectType=Conversation",
"content": "<p><a href=\"https://infosec.exchange/tags/StagedC2\" class=\"mention hashtag\" rel=\"tag\">#<span>StagedC2</span></a> config observed at Fri Nov 8 14:20:15 2024 UTC, located at hXXps://pastebin[.]com/raw/zGXXcBxT C2: form-omaha[.]gl[.]at[.]ply[.]gg:50357 (IP: 147.185.221.23)</p>",
"contentMap": {
"en": "<p><a href=\"https://infosec.exchange/tags/StagedC2\" class=\"mention hashtag\" rel=\"tag\">#<span>StagedC2</span></a> config observed at Fri Nov 8 14:20:15 2024 UTC, located at hXXps://pastebin[.]com/raw/zGXXcBxT C2: form-omaha[.]gl[.]at[.]ply[.]gg:50357 (IP: 147.185.221.23)</p>"
},
"attachment": [],
"tag": [
{
"type": "Hashtag",
"href": "https://infosec.exchange/tags/stagedc2",
"name": "#stagedc2"
}
],
"replies": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113453355248356793/replies",
"type": "Collection",
"first": {
"type": "CollectionPage",
"next": "https://infosec.exchange/users/ScumBots/statuses/113453355248356793/replies?only_other_accounts=true&page=true",
"partOf": "https://infosec.exchange/users/ScumBots/statuses/113453355248356793/replies",
"items": []
}
},
"likes": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113453355248356793/likes",
"type": "Collection",
"totalItems": 0
},
"shares": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113453355248356793/shares",
"type": "Collection",
"totalItems": 0
}
}
},
{
"id": "https://infosec.exchange/users/ScumBots/statuses/113453351185284353/activity",
"type": "Create",
"actor": "https://infosec.exchange/users/ScumBots",
"published": "2024-11-09T13:59:14Z",
"to": [
"https://www.w3.org/ns/activitystreams#Public"
],
"cc": [
"https://infosec.exchange/users/ScumBots/followers"
],
"object": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113453351185284353",
"type": "Note",
"summary": null,
"inReplyTo": null,
"published": "2024-11-09T13:59:14Z",
"url": "https://infosec.exchange/@ScumBots/113453351185284353",
"attributedTo": "https://infosec.exchange/users/ScumBots",
"to": [
"https://www.w3.org/ns/activitystreams#Public"
],
"cc": [
"https://infosec.exchange/users/ScumBots/followers"
],
"sensitive": false,
"atomUri": "https://infosec.exchange/users/ScumBots/statuses/113453351185284353",
"inReplyToAtomUri": null,
"conversation": "tag:infosec.exchange,2024-11-09:objectId=211417175:objectType=Conversation",
"content": "<p><a href=\"https://infosec.exchange/tags/StagedC2\" class=\"mention hashtag\" rel=\"tag\">#<span>StagedC2</span></a> config observed at Thu Nov 7 16:40:02 2024 UTC, located at hXXps://pastebin[.]com/raw/mCEtWtJz C2: 77[.]0[.]168[.]173:6969</p>",
"contentMap": {
"en": "<p><a href=\"https://infosec.exchange/tags/StagedC2\" class=\"mention hashtag\" rel=\"tag\">#<span>StagedC2</span></a> config observed at Thu Nov 7 16:40:02 2024 UTC, located at hXXps://pastebin[.]com/raw/mCEtWtJz C2: 77[.]0[.]168[.]173:6969</p>"
},
"attachment": [],
"tag": [
{
"type": "Hashtag",
"href": "https://infosec.exchange/tags/stagedc2",
"name": "#stagedc2"
}
],
"replies": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113453351185284353/replies",
"type": "Collection",
"first": {
"type": "CollectionPage",
"next": "https://infosec.exchange/users/ScumBots/statuses/113453351185284353/replies?only_other_accounts=true&page=true",
"partOf": "https://infosec.exchange/users/ScumBots/statuses/113453351185284353/replies",
"items": []
}
},
"likes": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113453351185284353/likes",
"type": "Collection",
"totalItems": 0
},
"shares": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113453351185284353/shares",
"type": "Collection",
"totalItems": 0
}
}
},
{
"id": "https://infosec.exchange/users/ScumBots/statuses/113453349126204501/activity",
"type": "Create",
"actor": "https://infosec.exchange/users/ScumBots",
"published": "2024-11-09T13:58:42Z",
"to": [
"https://www.w3.org/ns/activitystreams#Public"
],
"cc": [
"https://infosec.exchange/users/ScumBots/followers"
],
"object": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113453349126204501",
"type": "Note",
"summary": null,
"inReplyTo": null,
"published": "2024-11-09T13:58:42Z",
"url": "https://infosec.exchange/@ScumBots/113453349126204501",
"attributedTo": "https://infosec.exchange/users/ScumBots",
"to": [
"https://www.w3.org/ns/activitystreams#Public"
],
"cc": [
"https://infosec.exchange/users/ScumBots/followers"
],
"sensitive": false,
"atomUri": "https://infosec.exchange/users/ScumBots/statuses/113453349126204501",
"inReplyToAtomUri": null,
"conversation": "tag:infosec.exchange,2024-11-09:objectId=211417058:objectType=Conversation",
"content": "<p><a href=\"https://infosec.exchange/tags/StagedC2\" class=\"mention hashtag\" rel=\"tag\">#<span>StagedC2</span></a> config observed at Thu Nov 7 06:54:06 2024 UTC, located at hXXps://pastebin[.]com/raw/c8qJf1m5 C2: 87[.]120[.]125[.]47:7000</p>",
"contentMap": {
"en": "<p><a href=\"https://infosec.exchange/tags/StagedC2\" class=\"mention hashtag\" rel=\"tag\">#<span>StagedC2</span></a> config observed at Thu Nov 7 06:54:06 2024 UTC, located at hXXps://pastebin[.]com/raw/c8qJf1m5 C2: 87[.]120[.]125[.]47:7000</p>"
},
"attachment": [],
"tag": [
{
"type": "Hashtag",
"href": "https://infosec.exchange/tags/stagedc2",
"name": "#stagedc2"
}
],
"replies": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113453349126204501/replies",
"type": "Collection",
"first": {
"type": "CollectionPage",
"next": "https://infosec.exchange/users/ScumBots/statuses/113453349126204501/replies?only_other_accounts=true&page=true",
"partOf": "https://infosec.exchange/users/ScumBots/statuses/113453349126204501/replies",
"items": []
}
},
"likes": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113453349126204501/likes",
"type": "Collection",
"totalItems": 0
},
"shares": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113453349126204501/shares",
"type": "Collection",
"totalItems": 0
}
}
},
{
"id": "https://infosec.exchange/users/ScumBots/statuses/113453347106268217/activity",
"type": "Create",
"actor": "https://infosec.exchange/users/ScumBots",
"published": "2024-11-09T13:58:11Z",
"to": [
"https://www.w3.org/ns/activitystreams#Public"
],
"cc": [
"https://infosec.exchange/users/ScumBots/followers"
],
"object": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113453347106268217",
"type": "Note",
"summary": null,
"inReplyTo": null,
"published": "2024-11-09T13:58:11Z",
"url": "https://infosec.exchange/@ScumBots/113453347106268217",
"attributedTo": "https://infosec.exchange/users/ScumBots",
"to": [
"https://www.w3.org/ns/activitystreams#Public"
],
"cc": [
"https://infosec.exchange/users/ScumBots/followers"
],
"sensitive": false,
"atomUri": "https://infosec.exchange/users/ScumBots/statuses/113453347106268217",
"inReplyToAtomUri": null,
"conversation": "tag:infosec.exchange,2024-11-09:objectId=211416931:objectType=Conversation",
"content": "<p><a href=\"https://infosec.exchange/tags/StagedC2\" class=\"mention hashtag\" rel=\"tag\">#<span>StagedC2</span></a> config observed at Fri Nov 8 11:38:06 2024 UTC, located at hXXps://pastebin[.]com/raw/ssuP9iSG C2: visit-kill[.]gl[.]at[.]ply[.]gg:51861 (IP: 147.185.221.23)</p>",
"contentMap": {
"en": "<p><a href=\"https://infosec.exchange/tags/StagedC2\" class=\"mention hashtag\" rel=\"tag\">#<span>StagedC2</span></a> config observed at Fri Nov 8 11:38:06 2024 UTC, located at hXXps://pastebin[.]com/raw/ssuP9iSG C2: visit-kill[.]gl[.]at[.]ply[.]gg:51861 (IP: 147.185.221.23)</p>"
},
"attachment": [],
"tag": [
{
"type": "Hashtag",
"href": "https://infosec.exchange/tags/stagedc2",
"name": "#stagedc2"
}
],
"replies": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113453347106268217/replies",
"type": "Collection",
"first": {
"type": "CollectionPage",
"next": "https://infosec.exchange/users/ScumBots/statuses/113453347106268217/replies?only_other_accounts=true&page=true",
"partOf": "https://infosec.exchange/users/ScumBots/statuses/113453347106268217/replies",
"items": []
}
},
"likes": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113453347106268217/likes",
"type": "Collection",
"totalItems": 0
},
"shares": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113453347106268217/shares",
"type": "Collection",
"totalItems": 0
}
}
},
{
"id": "https://infosec.exchange/users/ScumBots/statuses/113453342992277215/activity",
"type": "Create",
"actor": "https://infosec.exchange/users/ScumBots",
"published": "2024-11-09T13:57:09Z",
"to": [
"https://www.w3.org/ns/activitystreams#Public"
],
"cc": [
"https://infosec.exchange/users/ScumBots/followers"
],
"object": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113453342992277215",
"type": "Note",
"summary": null,
"inReplyTo": null,
"published": "2024-11-09T13:57:09Z",
"url": "https://infosec.exchange/@ScumBots/113453342992277215",
"attributedTo": "https://infosec.exchange/users/ScumBots",
"to": [
"https://www.w3.org/ns/activitystreams#Public"
],
"cc": [
"https://infosec.exchange/users/ScumBots/followers"
],
"sensitive": false,
"atomUri": "https://infosec.exchange/users/ScumBots/statuses/113453342992277215",
"inReplyToAtomUri": null,
"conversation": "tag:infosec.exchange,2024-11-09:objectId=211416722:objectType=Conversation",
"content": "<p><a href=\"https://infosec.exchange/tags/StagedC2\" class=\"mention hashtag\" rel=\"tag\">#<span>StagedC2</span></a> config observed at Sat Nov 9 13:18:04 2024 UTC, located at hXXps://pastebin[.]com/raw/a5Da5f8W C2: 88[.]70[.]237[.]233:80</p>",
"contentMap": {
"en": "<p><a href=\"https://infosec.exchange/tags/StagedC2\" class=\"mention hashtag\" rel=\"tag\">#<span>StagedC2</span></a> config observed at Sat Nov 9 13:18:04 2024 UTC, located at hXXps://pastebin[.]com/raw/a5Da5f8W C2: 88[.]70[.]237[.]233:80</p>"
},
"attachment": [],
"tag": [
{
"type": "Hashtag",
"href": "https://infosec.exchange/tags/stagedc2",
"name": "#stagedc2"
}
],
"replies": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113453342992277215/replies",
"type": "Collection",
"first": {
"type": "CollectionPage",
"next": "https://infosec.exchange/users/ScumBots/statuses/113453342992277215/replies?only_other_accounts=true&page=true",
"partOf": "https://infosec.exchange/users/ScumBots/statuses/113453342992277215/replies",
"items": []
}
},
"likes": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113453342992277215/likes",
"type": "Collection",
"totalItems": 0
},
"shares": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113453342992277215/shares",
"type": "Collection",
"totalItems": 0
}
}
},
{
"id": "https://infosec.exchange/users/ScumBots/statuses/113453340911574565/activity",
"type": "Create",
"actor": "https://infosec.exchange/users/ScumBots",
"published": "2024-11-09T13:56:37Z",
"to": [
"https://www.w3.org/ns/activitystreams#Public"
],
"cc": [
"https://infosec.exchange/users/ScumBots/followers"
],
"object": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113453340911574565",
"type": "Note",
"summary": null,
"inReplyTo": null,
"published": "2024-11-09T13:56:37Z",
"url": "https://infosec.exchange/@ScumBots/113453340911574565",
"attributedTo": "https://infosec.exchange/users/ScumBots",
"to": [
"https://www.w3.org/ns/activitystreams#Public"
],
"cc": [
"https://infosec.exchange/users/ScumBots/followers"
],
"sensitive": false,
"atomUri": "https://infosec.exchange/users/ScumBots/statuses/113453340911574565",
"inReplyToAtomUri": null,
"conversation": "tag:infosec.exchange,2024-11-09:objectId=211416584:objectType=Conversation",
"content": "<p><a href=\"https://infosec.exchange/tags/StagedC2\" class=\"mention hashtag\" rel=\"tag\">#<span>StagedC2</span></a> config observed at Fri Nov 8 18:46:10 2024 UTC, located at hXXps://pastebin[.]com/raw/em3U8C6F C2: 51[.]75[.]145[.]220:443</p>",
"contentMap": {
"en": "<p><a href=\"https://infosec.exchange/tags/StagedC2\" class=\"mention hashtag\" rel=\"tag\">#<span>StagedC2</span></a> config observed at Fri Nov 8 18:46:10 2024 UTC, located at hXXps://pastebin[.]com/raw/em3U8C6F C2: 51[.]75[.]145[.]220:443</p>"
},
"attachment": [],
"tag": [
{
"type": "Hashtag",
"href": "https://infosec.exchange/tags/stagedc2",
"name": "#stagedc2"
}
],
"replies": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113453340911574565/replies",
"type": "Collection",
"first": {
"type": "CollectionPage",
"next": "https://infosec.exchange/users/ScumBots/statuses/113453340911574565/replies?only_other_accounts=true&page=true",
"partOf": "https://infosec.exchange/users/ScumBots/statuses/113453340911574565/replies",
"items": []
}
},
"likes": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113453340911574565/likes",
"type": "Collection",
"totalItems": 0
},
"shares": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113453340911574565/shares",
"type": "Collection",
"totalItems": 0
}
}
},
{
"id": "https://infosec.exchange/users/ScumBots/statuses/113453338834228257/activity",
"type": "Create",
"actor": "https://infosec.exchange/users/ScumBots",
"published": "2024-11-09T13:56:05Z",
"to": [
"https://www.w3.org/ns/activitystreams#Public"
],
"cc": [
"https://infosec.exchange/users/ScumBots/followers"
],
"object": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113453338834228257",
"type": "Note",
"summary": null,
"inReplyTo": null,
"published": "2024-11-09T13:56:05Z",
"url": "https://infosec.exchange/@ScumBots/113453338834228257",
"attributedTo": "https://infosec.exchange/users/ScumBots",
"to": [
"https://www.w3.org/ns/activitystreams#Public"
],
"cc": [
"https://infosec.exchange/users/ScumBots/followers"
],
"sensitive": false,
"atomUri": "https://infosec.exchange/users/ScumBots/statuses/113453338834228257",
"inReplyToAtomUri": null,
"conversation": "tag:infosec.exchange,2024-11-09:objectId=211416456:objectType=Conversation",
"content": "<p><a href=\"https://infosec.exchange/tags/StagedC2\" class=\"mention hashtag\" rel=\"tag\">#<span>StagedC2</span></a> config observed at Fri Nov 8 12:26:10 2024 UTC, located at hXXps://pastebin[.]com/raw/DN9TjD4u C2: 40[.]116[.]91[.]162:7000</p>",
"contentMap": {
"en": "<p><a href=\"https://infosec.exchange/tags/StagedC2\" class=\"mention hashtag\" rel=\"tag\">#<span>StagedC2</span></a> config observed at Fri Nov 8 12:26:10 2024 UTC, located at hXXps://pastebin[.]com/raw/DN9TjD4u C2: 40[.]116[.]91[.]162:7000</p>"
},
"attachment": [],
"tag": [
{
"type": "Hashtag",
"href": "https://infosec.exchange/tags/stagedc2",
"name": "#stagedc2"
}
],
"replies": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113453338834228257/replies",
"type": "Collection",
"first": {
"type": "CollectionPage",
"next": "https://infosec.exchange/users/ScumBots/statuses/113453338834228257/replies?only_other_accounts=true&page=true",
"partOf": "https://infosec.exchange/users/ScumBots/statuses/113453338834228257/replies",
"items": []
}
},
"likes": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113453338834228257/likes",
"type": "Collection",
"totalItems": 0
},
"shares": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113453338834228257/shares",
"type": "Collection",
"totalItems": 0
}
}
},
{
"id": "https://infosec.exchange/users/ScumBots/statuses/113453336794370069/activity",
"type": "Create",
"actor": "https://infosec.exchange/users/ScumBots",
"published": "2024-11-09T13:55:34Z",
"to": [
"https://www.w3.org/ns/activitystreams#Public"
],
"cc": [
"https://infosec.exchange/users/ScumBots/followers"
],
"object": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113453336794370069",
"type": "Note",
"summary": null,
"inReplyTo": null,
"published": "2024-11-09T13:55:34Z",
"url": "https://infosec.exchange/@ScumBots/113453336794370069",
"attributedTo": "https://infosec.exchange/users/ScumBots",
"to": [
"https://www.w3.org/ns/activitystreams#Public"
],
"cc": [
"https://infosec.exchange/users/ScumBots/followers"
],
"sensitive": false,
"atomUri": "https://infosec.exchange/users/ScumBots/statuses/113453336794370069",
"inReplyToAtomUri": null,
"conversation": "tag:infosec.exchange,2024-11-09:objectId=211416340:objectType=Conversation",
"content": "<p><a href=\"https://infosec.exchange/tags/StagedC2\" class=\"mention hashtag\" rel=\"tag\">#<span>StagedC2</span></a> config observed at Fri Nov 8 12:52:09 2024 UTC, located at hXXps://pastebin[.]com/raw/ANTHdrXH C2: internet-retailer[.]gl[.]at[.]ply[.]gg:55599 (IP: 147.185.221.21)</p>",
"contentMap": {
"en": "<p><a href=\"https://infosec.exchange/tags/StagedC2\" class=\"mention hashtag\" rel=\"tag\">#<span>StagedC2</span></a> config observed at Fri Nov 8 12:52:09 2024 UTC, located at hXXps://pastebin[.]com/raw/ANTHdrXH C2: internet-retailer[.]gl[.]at[.]ply[.]gg:55599 (IP: 147.185.221.21)</p>"
},
"attachment": [],
"tag": [
{
"type": "Hashtag",
"href": "https://infosec.exchange/tags/stagedc2",
"name": "#stagedc2"
}
],
"replies": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113453336794370069/replies",
"type": "Collection",
"first": {
"type": "CollectionPage",
"next": "https://infosec.exchange/users/ScumBots/statuses/113453336794370069/replies?only_other_accounts=true&page=true",
"partOf": "https://infosec.exchange/users/ScumBots/statuses/113453336794370069/replies",
"items": []
}
},
"likes": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113453336794370069/likes",
"type": "Collection",
"totalItems": 0
},
"shares": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113453336794370069/shares",
"type": "Collection",
"totalItems": 0
}
}
},
{
"id": "https://infosec.exchange/users/ScumBots/statuses/113453332752857828/activity",
"type": "Create",
"actor": "https://infosec.exchange/users/ScumBots",
"published": "2024-11-09T13:54:32Z",
"to": [
"https://www.w3.org/ns/activitystreams#Public"
],
"cc": [
"https://infosec.exchange/users/ScumBots/followers"
],
"object": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113453332752857828",
"type": "Note",
"summary": null,
"inReplyTo": null,
"published": "2024-11-09T13:54:32Z",
"url": "https://infosec.exchange/@ScumBots/113453332752857828",
"attributedTo": "https://infosec.exchange/users/ScumBots",
"to": [
"https://www.w3.org/ns/activitystreams#Public"
],
"cc": [
"https://infosec.exchange/users/ScumBots/followers"
],
"sensitive": false,
"atomUri": "https://infosec.exchange/users/ScumBots/statuses/113453332752857828",
"inReplyToAtomUri": null,
"conversation": "tag:infosec.exchange,2024-11-09:objectId=211416051:objectType=Conversation",
"content": "<p><a href=\"https://infosec.exchange/tags/StagedC2\" class=\"mention hashtag\" rel=\"tag\">#<span>StagedC2</span></a> config observed at Fri Nov 8 21:53:09 2024 UTC, located at hXXps://pastebin[.]com/raw/6gi36imF C2: 4[.]tcp[.]eu[.]ngrok[.]io:15632 (IP: 3.127.253.86)</p>",
"contentMap": {
"en": "<p><a href=\"https://infosec.exchange/tags/StagedC2\" class=\"mention hashtag\" rel=\"tag\">#<span>StagedC2</span></a> config observed at Fri Nov 8 21:53:09 2024 UTC, located at hXXps://pastebin[.]com/raw/6gi36imF C2: 4[.]tcp[.]eu[.]ngrok[.]io:15632 (IP: 3.127.253.86)</p>"
},
"attachment": [],
"tag": [
{
"type": "Hashtag",
"href": "https://infosec.exchange/tags/stagedc2",
"name": "#stagedc2"
}
],
"replies": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113453332752857828/replies",
"type": "Collection",
"first": {
"type": "CollectionPage",
"next": "https://infosec.exchange/users/ScumBots/statuses/113453332752857828/replies?only_other_accounts=true&page=true",
"partOf": "https://infosec.exchange/users/ScumBots/statuses/113453332752857828/replies",
"items": []
}
},
"likes": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113453332752857828/likes",
"type": "Collection",
"totalItems": 1
},
"shares": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113453332752857828/shares",
"type": "Collection",
"totalItems": 2
}
}
}
]
}