A small tool to view real-world ActivityPub objects as JSON! Enter a URL
or username from Mastodon or a similar service below, and we'll send a
request with
the right
Accept
header
to the server to view the underlying object.
{
"@context": [
"https://www.w3.org/ns/activitystreams",
{
"ostatus": "http://ostatus.org#",
"atomUri": "ostatus:atomUri",
"inReplyToAtomUri": "ostatus:inReplyToAtomUri",
"conversation": "ostatus:conversation",
"sensitive": "as:sensitive",
"toot": "http://joinmastodon.org/ns#",
"votersCount": "toot:votersCount",
"litepub": "http://litepub.social/ns#",
"directMessage": "litepub:directMessage",
"Hashtag": "as:Hashtag"
}
],
"id": "https://infosec.exchange/users/ScumBots/outbox?page=true",
"type": "OrderedCollectionPage",
"next": "https://infosec.exchange/users/ScumBots/outbox?max_id=113528042157764728&page=true",
"prev": "https://infosec.exchange/users/ScumBots/outbox?min_id=113534412307631389&page=true",
"partOf": "https://infosec.exchange/users/ScumBots/outbox",
"orderedItems": [
{
"id": "https://infosec.exchange/users/ScumBots/statuses/113534412307631389/activity",
"type": "Create",
"actor": "https://infosec.exchange/users/ScumBots",
"published": "2024-11-23T21:34:08Z",
"to": [
"https://www.w3.org/ns/activitystreams#Public"
],
"cc": [
"https://infosec.exchange/users/ScumBots/followers"
],
"object": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113534412307631389",
"type": "Note",
"summary": null,
"inReplyTo": null,
"published": "2024-11-23T21:34:08Z",
"url": "https://infosec.exchange/@ScumBots/113534412307631389",
"attributedTo": "https://infosec.exchange/users/ScumBots",
"to": [
"https://www.w3.org/ns/activitystreams#Public"
],
"cc": [
"https://infosec.exchange/users/ScumBots/followers"
],
"sensitive": false,
"atomUri": "https://infosec.exchange/users/ScumBots/statuses/113534412307631389",
"inReplyToAtomUri": null,
"conversation": "tag:infosec.exchange,2024-11-23:objectId=215989338:objectType=Conversation",
"content": "<p><a href=\"https://infosec.exchange/tags/StagedC2\" class=\"mention hashtag\" rel=\"tag\">#<span>StagedC2</span></a> config observed at Sat Nov 23 21:19:06 2024 UTC, located at hXXps://pastebin[.]com/raw/gB2SCHj9 C2: 6[.]tcp[.]eu[.]ngrok[.]io:17137 (IP: 3.66.38.117)</p>",
"contentMap": {
"en": "<p><a href=\"https://infosec.exchange/tags/StagedC2\" class=\"mention hashtag\" rel=\"tag\">#<span>StagedC2</span></a> config observed at Sat Nov 23 21:19:06 2024 UTC, located at hXXps://pastebin[.]com/raw/gB2SCHj9 C2: 6[.]tcp[.]eu[.]ngrok[.]io:17137 (IP: 3.66.38.117)</p>"
},
"attachment": [],
"tag": [
{
"type": "Hashtag",
"href": "https://infosec.exchange/tags/stagedc2",
"name": "#stagedc2"
}
],
"replies": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113534412307631389/replies",
"type": "Collection",
"first": {
"type": "CollectionPage",
"next": "https://infosec.exchange/users/ScumBots/statuses/113534412307631389/replies?only_other_accounts=true&page=true",
"partOf": "https://infosec.exchange/users/ScumBots/statuses/113534412307631389/replies",
"items": []
}
},
"likes": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113534412307631389/likes",
"type": "Collection",
"totalItems": 0
},
"shares": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113534412307631389/shares",
"type": "Collection",
"totalItems": 0
}
}
},
{
"id": "https://infosec.exchange/users/ScumBots/statuses/113534408217367378/activity",
"type": "Create",
"actor": "https://infosec.exchange/users/ScumBots",
"published": "2024-11-23T21:33:06Z",
"to": [
"https://www.w3.org/ns/activitystreams#Public"
],
"cc": [
"https://infosec.exchange/users/ScumBots/followers"
],
"object": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113534408217367378",
"type": "Note",
"summary": null,
"inReplyTo": null,
"published": "2024-11-23T21:33:06Z",
"url": "https://infosec.exchange/@ScumBots/113534408217367378",
"attributedTo": "https://infosec.exchange/users/ScumBots",
"to": [
"https://www.w3.org/ns/activitystreams#Public"
],
"cc": [
"https://infosec.exchange/users/ScumBots/followers"
],
"sensitive": false,
"atomUri": "https://infosec.exchange/users/ScumBots/statuses/113534408217367378",
"inReplyToAtomUri": null,
"conversation": "tag:infosec.exchange,2024-11-23:objectId=215989136:objectType=Conversation",
"content": "<p><a href=\"https://infosec.exchange/tags/StagedC2\" class=\"mention hashtag\" rel=\"tag\">#<span>StagedC2</span></a> config observed at Sat Nov 23 21:18:04 2024 UTC, located at hXXps://pastebin[.]com/raw/Qm9ejJ2L C2: 4[.]tcp[.]eu[.]ngrok[.]io:19194 (IP: 52.28.112.211)</p>",
"contentMap": {
"en": "<p><a href=\"https://infosec.exchange/tags/StagedC2\" class=\"mention hashtag\" rel=\"tag\">#<span>StagedC2</span></a> config observed at Sat Nov 23 21:18:04 2024 UTC, located at hXXps://pastebin[.]com/raw/Qm9ejJ2L C2: 4[.]tcp[.]eu[.]ngrok[.]io:19194 (IP: 52.28.112.211)</p>"
},
"attachment": [],
"tag": [
{
"type": "Hashtag",
"href": "https://infosec.exchange/tags/stagedc2",
"name": "#stagedc2"
}
],
"replies": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113534408217367378/replies",
"type": "Collection",
"first": {
"type": "CollectionPage",
"next": "https://infosec.exchange/users/ScumBots/statuses/113534408217367378/replies?only_other_accounts=true&page=true",
"partOf": "https://infosec.exchange/users/ScumBots/statuses/113534408217367378/replies",
"items": []
}
},
"likes": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113534408217367378/likes",
"type": "Collection",
"totalItems": 0
},
"shares": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113534408217367378/shares",
"type": "Collection",
"totalItems": 0
}
}
},
{
"id": "https://infosec.exchange/users/ScumBots/statuses/113534180432934252/activity",
"type": "Create",
"actor": "https://infosec.exchange/users/ScumBots",
"published": "2024-11-23T20:35:10Z",
"to": [
"https://www.w3.org/ns/activitystreams#Public"
],
"cc": [
"https://infosec.exchange/users/ScumBots/followers"
],
"object": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113534180432934252",
"type": "Note",
"summary": null,
"inReplyTo": null,
"published": "2024-11-23T20:35:10Z",
"url": "https://infosec.exchange/@ScumBots/113534180432934252",
"attributedTo": "https://infosec.exchange/users/ScumBots",
"to": [
"https://www.w3.org/ns/activitystreams#Public"
],
"cc": [
"https://infosec.exchange/users/ScumBots/followers"
],
"sensitive": false,
"atomUri": "https://infosec.exchange/users/ScumBots/statuses/113534180432934252",
"inReplyToAtomUri": null,
"conversation": "tag:infosec.exchange,2024-11-23:objectId=215976628:objectType=Conversation",
"content": "<p><a href=\"https://infosec.exchange/tags/StagedC2\" class=\"mention hashtag\" rel=\"tag\">#<span>StagedC2</span></a> config observed at Sat Nov 23 19:55:04 2024 UTC, located at hXXps://pastebin[.]com/raw/LJFQwHyb C2: 2[.]tcp[.]eu[.]ngrok[.]io:16264 (IP: 18.192.93.86)</p>",
"contentMap": {
"en": "<p><a href=\"https://infosec.exchange/tags/StagedC2\" class=\"mention hashtag\" rel=\"tag\">#<span>StagedC2</span></a> config observed at Sat Nov 23 19:55:04 2024 UTC, located at hXXps://pastebin[.]com/raw/LJFQwHyb C2: 2[.]tcp[.]eu[.]ngrok[.]io:16264 (IP: 18.192.93.86)</p>"
},
"attachment": [],
"tag": [
{
"type": "Hashtag",
"href": "https://infosec.exchange/tags/stagedc2",
"name": "#stagedc2"
}
],
"replies": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113534180432934252/replies",
"type": "Collection",
"first": {
"type": "CollectionPage",
"next": "https://infosec.exchange/users/ScumBots/statuses/113534180432934252/replies?only_other_accounts=true&page=true",
"partOf": "https://infosec.exchange/users/ScumBots/statuses/113534180432934252/replies",
"items": []
}
},
"likes": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113534180432934252/likes",
"type": "Collection",
"totalItems": 0
},
"shares": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113534180432934252/shares",
"type": "Collection",
"totalItems": 0
}
}
},
{
"id": "https://infosec.exchange/users/ScumBots/statuses/113534176327199815/activity",
"type": "Create",
"actor": "https://infosec.exchange/users/ScumBots",
"published": "2024-11-23T20:34:07Z",
"to": [
"https://www.w3.org/ns/activitystreams#Public"
],
"cc": [
"https://infosec.exchange/users/ScumBots/followers"
],
"object": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113534176327199815",
"type": "Note",
"summary": null,
"inReplyTo": null,
"published": "2024-11-23T20:34:07Z",
"url": "https://infosec.exchange/@ScumBots/113534176327199815",
"attributedTo": "https://infosec.exchange/users/ScumBots",
"to": [
"https://www.w3.org/ns/activitystreams#Public"
],
"cc": [
"https://infosec.exchange/users/ScumBots/followers"
],
"sensitive": false,
"atomUri": "https://infosec.exchange/users/ScumBots/statuses/113534176327199815",
"inReplyToAtomUri": null,
"conversation": "tag:infosec.exchange,2024-11-23:objectId=215976413:objectType=Conversation",
"content": "<p><a href=\"https://infosec.exchange/tags/StagedC2\" class=\"mention hashtag\" rel=\"tag\">#<span>StagedC2</span></a> config observed at Sat Nov 23 20:25:03 2024 UTC, located at hXXps://pastebin[.]com/raw/4ex1PgGy C2: mean-nyc[.]gl[.]at[.]ply[.]gg:4264 (IP: 147.185.221.24)</p>",
"contentMap": {
"en": "<p><a href=\"https://infosec.exchange/tags/StagedC2\" class=\"mention hashtag\" rel=\"tag\">#<span>StagedC2</span></a> config observed at Sat Nov 23 20:25:03 2024 UTC, located at hXXps://pastebin[.]com/raw/4ex1PgGy C2: mean-nyc[.]gl[.]at[.]ply[.]gg:4264 (IP: 147.185.221.24)</p>"
},
"attachment": [],
"tag": [
{
"type": "Hashtag",
"href": "https://infosec.exchange/tags/stagedc2",
"name": "#stagedc2"
}
],
"replies": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113534176327199815/replies",
"type": "Collection",
"first": {
"type": "CollectionPage",
"next": "https://infosec.exchange/users/ScumBots/statuses/113534176327199815/replies?only_other_accounts=true&page=true",
"partOf": "https://infosec.exchange/users/ScumBots/statuses/113534176327199815/replies",
"items": []
}
},
"likes": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113534176327199815/likes",
"type": "Collection",
"totalItems": 0
},
"shares": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113534176327199815/shares",
"type": "Collection",
"totalItems": 0
}
}
},
{
"id": "https://infosec.exchange/users/ScumBots/statuses/113534172226149332/activity",
"type": "Create",
"actor": "https://infosec.exchange/users/ScumBots",
"published": "2024-11-23T20:33:05Z",
"to": [
"https://www.w3.org/ns/activitystreams#Public"
],
"cc": [
"https://infosec.exchange/users/ScumBots/followers"
],
"object": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113534172226149332",
"type": "Note",
"summary": null,
"inReplyTo": null,
"published": "2024-11-23T20:33:05Z",
"url": "https://infosec.exchange/@ScumBots/113534172226149332",
"attributedTo": "https://infosec.exchange/users/ScumBots",
"to": [
"https://www.w3.org/ns/activitystreams#Public"
],
"cc": [
"https://infosec.exchange/users/ScumBots/followers"
],
"sensitive": false,
"atomUri": "https://infosec.exchange/users/ScumBots/statuses/113534172226149332",
"inReplyToAtomUri": null,
"conversation": "tag:infosec.exchange,2024-11-23:objectId=215976186:objectType=Conversation",
"content": "<p><a href=\"https://infosec.exchange/tags/StagedC2\" class=\"mention hashtag\" rel=\"tag\">#<span>StagedC2</span></a> config observed at Sat Nov 23 20:19:06 2024 UTC, located at hXXps://pastebin[.]com/raw/shBKnR90 C2: 0[.]tcp[.]sa[.]ngrok[.]io:14742 (IP: 15.229.167.172)</p>",
"contentMap": {
"en": "<p><a href=\"https://infosec.exchange/tags/StagedC2\" class=\"mention hashtag\" rel=\"tag\">#<span>StagedC2</span></a> config observed at Sat Nov 23 20:19:06 2024 UTC, located at hXXps://pastebin[.]com/raw/shBKnR90 C2: 0[.]tcp[.]sa[.]ngrok[.]io:14742 (IP: 15.229.167.172)</p>"
},
"attachment": [],
"tag": [
{
"type": "Hashtag",
"href": "https://infosec.exchange/tags/stagedc2",
"name": "#stagedc2"
}
],
"replies": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113534172226149332/replies",
"type": "Collection",
"first": {
"type": "CollectionPage",
"next": "https://infosec.exchange/users/ScumBots/statuses/113534172226149332/replies?only_other_accounts=true&page=true",
"partOf": "https://infosec.exchange/users/ScumBots/statuses/113534172226149332/replies",
"items": []
}
},
"likes": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113534172226149332/likes",
"type": "Collection",
"totalItems": 0
},
"shares": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113534172226149332/shares",
"type": "Collection",
"totalItems": 0
}
}
},
{
"id": "https://infosec.exchange/users/ScumBots/statuses/113533936258411743/activity",
"type": "Create",
"actor": "https://infosec.exchange/users/ScumBots",
"published": "2024-11-23T19:33:04Z",
"to": [
"https://www.w3.org/ns/activitystreams#Public"
],
"cc": [
"https://infosec.exchange/users/ScumBots/followers"
],
"object": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113533936258411743",
"type": "Note",
"summary": null,
"inReplyTo": null,
"published": "2024-11-23T19:33:04Z",
"url": "https://infosec.exchange/@ScumBots/113533936258411743",
"attributedTo": "https://infosec.exchange/users/ScumBots",
"to": [
"https://www.w3.org/ns/activitystreams#Public"
],
"cc": [
"https://infosec.exchange/users/ScumBots/followers"
],
"sensitive": false,
"atomUri": "https://infosec.exchange/users/ScumBots/statuses/113533936258411743",
"inReplyToAtomUri": null,
"conversation": "tag:infosec.exchange,2024-11-23:objectId=215962614:objectType=Conversation",
"content": "<p><a href=\"https://infosec.exchange/tags/StagedC2\" class=\"mention hashtag\" rel=\"tag\">#<span>StagedC2</span></a> config observed at Sat Nov 23 19:22:09 2024 UTC, located at hXXps://pastebin[.]com/raw/V32xqx1S C2: ujytzeu[.]localto[.]net:1177 (IP: 185.141.35.21)</p>",
"contentMap": {
"en": "<p><a href=\"https://infosec.exchange/tags/StagedC2\" class=\"mention hashtag\" rel=\"tag\">#<span>StagedC2</span></a> config observed at Sat Nov 23 19:22:09 2024 UTC, located at hXXps://pastebin[.]com/raw/V32xqx1S C2: ujytzeu[.]localto[.]net:1177 (IP: 185.141.35.21)</p>"
},
"attachment": [],
"tag": [
{
"type": "Hashtag",
"href": "https://infosec.exchange/tags/stagedc2",
"name": "#stagedc2"
}
],
"replies": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113533936258411743/replies",
"type": "Collection",
"first": {
"type": "CollectionPage",
"next": "https://infosec.exchange/users/ScumBots/statuses/113533936258411743/replies?only_other_accounts=true&page=true",
"partOf": "https://infosec.exchange/users/ScumBots/statuses/113533936258411743/replies",
"items": []
}
},
"likes": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113533936258411743/likes",
"type": "Collection",
"totalItems": 0
},
"shares": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113533936258411743/shares",
"type": "Collection",
"totalItems": 0
}
}
},
{
"id": "https://infosec.exchange/users/ScumBots/statuses/113533466495699236/activity",
"type": "Create",
"actor": "https://infosec.exchange/users/ScumBots",
"published": "2024-11-23T17:33:36Z",
"to": [
"https://www.w3.org/ns/activitystreams#Public"
],
"cc": [
"https://infosec.exchange/users/ScumBots/followers"
],
"object": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113533466495699236",
"type": "Note",
"summary": null,
"inReplyTo": null,
"published": "2024-11-23T17:33:36Z",
"url": "https://infosec.exchange/@ScumBots/113533466495699236",
"attributedTo": "https://infosec.exchange/users/ScumBots",
"to": [
"https://www.w3.org/ns/activitystreams#Public"
],
"cc": [
"https://infosec.exchange/users/ScumBots/followers"
],
"sensitive": false,
"atomUri": "https://infosec.exchange/users/ScumBots/statuses/113533466495699236",
"inReplyToAtomUri": null,
"conversation": "tag:infosec.exchange,2024-11-23:objectId=215934321:objectType=Conversation",
"content": "<p><a href=\"https://infosec.exchange/tags/StagedC2\" class=\"mention hashtag\" rel=\"tag\">#<span>StagedC2</span></a> config observed at Sat Nov 23 17:16:08 2024 UTC, located at hXXps://pastebin[.]com/raw/22C6Mxa9 C2: 223[.]205[.]232[.]154:1379</p>",
"contentMap": {
"en": "<p><a href=\"https://infosec.exchange/tags/StagedC2\" class=\"mention hashtag\" rel=\"tag\">#<span>StagedC2</span></a> config observed at Sat Nov 23 17:16:08 2024 UTC, located at hXXps://pastebin[.]com/raw/22C6Mxa9 C2: 223[.]205[.]232[.]154:1379</p>"
},
"attachment": [],
"tag": [
{
"type": "Hashtag",
"href": "https://infosec.exchange/tags/stagedc2",
"name": "#stagedc2"
}
],
"replies": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113533466495699236/replies",
"type": "Collection",
"first": {
"type": "CollectionPage",
"next": "https://infosec.exchange/users/ScumBots/statuses/113533466495699236/replies?only_other_accounts=true&page=true",
"partOf": "https://infosec.exchange/users/ScumBots/statuses/113533466495699236/replies",
"items": []
}
},
"likes": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113533466495699236/likes",
"type": "Collection",
"totalItems": 0
},
"shares": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113533466495699236/shares",
"type": "Collection",
"totalItems": 0
}
}
},
{
"id": "https://infosec.exchange/users/ScumBots/statuses/113533464420445501/activity",
"type": "Create",
"actor": "https://infosec.exchange/users/ScumBots",
"published": "2024-11-23T17:33:05Z",
"to": [
"https://www.w3.org/ns/activitystreams#Public"
],
"cc": [
"https://infosec.exchange/users/ScumBots/followers"
],
"object": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113533464420445501",
"type": "Note",
"summary": null,
"inReplyTo": null,
"published": "2024-11-23T17:33:05Z",
"url": "https://infosec.exchange/@ScumBots/113533464420445501",
"attributedTo": "https://infosec.exchange/users/ScumBots",
"to": [
"https://www.w3.org/ns/activitystreams#Public"
],
"cc": [
"https://infosec.exchange/users/ScumBots/followers"
],
"sensitive": false,
"atomUri": "https://infosec.exchange/users/ScumBots/statuses/113533464420445501",
"inReplyToAtomUri": null,
"conversation": "tag:infosec.exchange,2024-11-23:objectId=215934202:objectType=Conversation",
"content": "<p><a href=\"https://infosec.exchange/tags/StagedC2\" class=\"mention hashtag\" rel=\"tag\">#<span>StagedC2</span></a> config observed at Sat Nov 23 16:39:08 2024 UTC, located at hXXps://pastebin[.]com/raw/9qSdBYEK C2: il-hammer[.]gl[.]at[.]ply[.]gg:62602 (IP: 147.185.221.23)</p>",
"contentMap": {
"en": "<p><a href=\"https://infosec.exchange/tags/StagedC2\" class=\"mention hashtag\" rel=\"tag\">#<span>StagedC2</span></a> config observed at Sat Nov 23 16:39:08 2024 UTC, located at hXXps://pastebin[.]com/raw/9qSdBYEK C2: il-hammer[.]gl[.]at[.]ply[.]gg:62602 (IP: 147.185.221.23)</p>"
},
"attachment": [],
"tag": [
{
"type": "Hashtag",
"href": "https://infosec.exchange/tags/stagedc2",
"name": "#stagedc2"
}
],
"replies": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113533464420445501/replies",
"type": "Collection",
"first": {
"type": "CollectionPage",
"next": "https://infosec.exchange/users/ScumBots/statuses/113533464420445501/replies?only_other_accounts=true&page=true",
"partOf": "https://infosec.exchange/users/ScumBots/statuses/113533464420445501/replies",
"items": []
}
},
"likes": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113533464420445501/likes",
"type": "Collection",
"totalItems": 0
},
"shares": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113533464420445501/shares",
"type": "Collection",
"totalItems": 0
}
}
},
{
"id": "https://infosec.exchange/users/ScumBots/statuses/113533228526709553/activity",
"type": "Create",
"actor": "https://infosec.exchange/users/ScumBots",
"published": "2024-11-23T16:33:05Z",
"to": [
"https://www.w3.org/ns/activitystreams#Public"
],
"cc": [
"https://infosec.exchange/users/ScumBots/followers"
],
"object": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113533228526709553",
"type": "Note",
"summary": null,
"inReplyTo": null,
"published": "2024-11-23T16:33:05Z",
"url": "https://infosec.exchange/@ScumBots/113533228526709553",
"attributedTo": "https://infosec.exchange/users/ScumBots",
"to": [
"https://www.w3.org/ns/activitystreams#Public"
],
"cc": [
"https://infosec.exchange/users/ScumBots/followers"
],
"sensitive": false,
"atomUri": "https://infosec.exchange/users/ScumBots/statuses/113533228526709553",
"inReplyToAtomUri": null,
"conversation": "tag:infosec.exchange,2024-11-23:objectId=215919435:objectType=Conversation",
"content": "<p><a href=\"https://infosec.exchange/tags/StagedC2\" class=\"mention hashtag\" rel=\"tag\">#<span>StagedC2</span></a> config observed at Sat Nov 23 16:03:02 2024 UTC, located at hXXps://pastebin[.]com/raw/htzpay1r C2: menu-exists[.]gl[.]at[.]ply[.]gg:61976 (IP: 147.185.221.23)</p>",
"contentMap": {
"en": "<p><a href=\"https://infosec.exchange/tags/StagedC2\" class=\"mention hashtag\" rel=\"tag\">#<span>StagedC2</span></a> config observed at Sat Nov 23 16:03:02 2024 UTC, located at hXXps://pastebin[.]com/raw/htzpay1r C2: menu-exists[.]gl[.]at[.]ply[.]gg:61976 (IP: 147.185.221.23)</p>"
},
"attachment": [],
"tag": [
{
"type": "Hashtag",
"href": "https://infosec.exchange/tags/stagedc2",
"name": "#stagedc2"
}
],
"replies": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113533228526709553/replies",
"type": "Collection",
"first": {
"type": "CollectionPage",
"next": "https://infosec.exchange/users/ScumBots/statuses/113533228526709553/replies?only_other_accounts=true&page=true",
"partOf": "https://infosec.exchange/users/ScumBots/statuses/113533228526709553/replies",
"items": []
}
},
"likes": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113533228526709553/likes",
"type": "Collection",
"totalItems": 0
},
"shares": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113533228526709553/shares",
"type": "Collection",
"totalItems": 0
}
}
},
{
"id": "https://infosec.exchange/users/ScumBots/statuses/113532994688932377/activity",
"type": "Create",
"actor": "https://infosec.exchange/users/ScumBots",
"published": "2024-11-23T15:33:37Z",
"to": [
"https://www.w3.org/ns/activitystreams#Public"
],
"cc": [
"https://infosec.exchange/users/ScumBots/followers"
],
"object": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113532994688932377",
"type": "Note",
"summary": null,
"inReplyTo": null,
"published": "2024-11-23T15:33:37Z",
"url": "https://infosec.exchange/@ScumBots/113532994688932377",
"attributedTo": "https://infosec.exchange/users/ScumBots",
"to": [
"https://www.w3.org/ns/activitystreams#Public"
],
"cc": [
"https://infosec.exchange/users/ScumBots/followers"
],
"sensitive": false,
"atomUri": "https://infosec.exchange/users/ScumBots/statuses/113532994688932377",
"inReplyToAtomUri": null,
"conversation": "tag:infosec.exchange,2024-11-23:objectId=215904840:objectType=Conversation",
"content": "<p><a href=\"https://infosec.exchange/tags/StagedC2\" class=\"mention hashtag\" rel=\"tag\">#<span>StagedC2</span></a> config observed at Sat Nov 23 14:50:10 2024 UTC, located at hXXps://pastebin[.]com/raw/ct3KF8KR C2: 91[.]200[.]220[.]130:8000</p>",
"contentMap": {
"en": "<p><a href=\"https://infosec.exchange/tags/StagedC2\" class=\"mention hashtag\" rel=\"tag\">#<span>StagedC2</span></a> config observed at Sat Nov 23 14:50:10 2024 UTC, located at hXXps://pastebin[.]com/raw/ct3KF8KR C2: 91[.]200[.]220[.]130:8000</p>"
},
"attachment": [],
"tag": [
{
"type": "Hashtag",
"href": "https://infosec.exchange/tags/stagedc2",
"name": "#stagedc2"
}
],
"replies": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113532994688932377/replies",
"type": "Collection",
"first": {
"type": "CollectionPage",
"next": "https://infosec.exchange/users/ScumBots/statuses/113532994688932377/replies?only_other_accounts=true&page=true",
"partOf": "https://infosec.exchange/users/ScumBots/statuses/113532994688932377/replies",
"items": []
}
},
"likes": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113532994688932377/likes",
"type": "Collection",
"totalItems": 0
},
"shares": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113532994688932377/shares",
"type": "Collection",
"totalItems": 0
}
}
},
{
"id": "https://infosec.exchange/users/ScumBots/statuses/113532992629204751/activity",
"type": "Create",
"actor": "https://infosec.exchange/users/ScumBots",
"published": "2024-11-23T15:33:06Z",
"to": [
"https://www.w3.org/ns/activitystreams#Public"
],
"cc": [
"https://infosec.exchange/users/ScumBots/followers"
],
"object": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113532992629204751",
"type": "Note",
"summary": null,
"inReplyTo": null,
"published": "2024-11-23T15:33:06Z",
"url": "https://infosec.exchange/@ScumBots/113532992629204751",
"attributedTo": "https://infosec.exchange/users/ScumBots",
"to": [
"https://www.w3.org/ns/activitystreams#Public"
],
"cc": [
"https://infosec.exchange/users/ScumBots/followers"
],
"sensitive": false,
"atomUri": "https://infosec.exchange/users/ScumBots/statuses/113532992629204751",
"inReplyToAtomUri": null,
"conversation": "tag:infosec.exchange,2024-11-23:objectId=215904701:objectType=Conversation",
"content": "<p><a href=\"https://infosec.exchange/tags/StagedC2\" class=\"mention hashtag\" rel=\"tag\">#<span>StagedC2</span></a> config observed at Sat Nov 23 15:07:03 2024 UTC, located at hXXps://pastebin[.]com/raw/8utEUGN2 C2: menu-exists[.]gl[.]at[.]ply[.]gg:61976 (IP: 147.185.221.23)</p>",
"contentMap": {
"en": "<p><a href=\"https://infosec.exchange/tags/StagedC2\" class=\"mention hashtag\" rel=\"tag\">#<span>StagedC2</span></a> config observed at Sat Nov 23 15:07:03 2024 UTC, located at hXXps://pastebin[.]com/raw/8utEUGN2 C2: menu-exists[.]gl[.]at[.]ply[.]gg:61976 (IP: 147.185.221.23)</p>"
},
"attachment": [],
"tag": [
{
"type": "Hashtag",
"href": "https://infosec.exchange/tags/stagedc2",
"name": "#stagedc2"
}
],
"replies": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113532992629204751/replies",
"type": "Collection",
"first": {
"type": "CollectionPage",
"next": "https://infosec.exchange/users/ScumBots/statuses/113532992629204751/replies?only_other_accounts=true&page=true",
"partOf": "https://infosec.exchange/users/ScumBots/statuses/113532992629204751/replies",
"items": []
}
},
"likes": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113532992629204751/likes",
"type": "Collection",
"totalItems": 0
},
"shares": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113532992629204751/shares",
"type": "Collection",
"totalItems": 0
}
}
},
{
"id": "https://infosec.exchange/users/ScumBots/statuses/113532520662485989/activity",
"type": "Create",
"actor": "https://infosec.exchange/users/ScumBots",
"published": "2024-11-23T13:33:04Z",
"to": [
"https://www.w3.org/ns/activitystreams#Public"
],
"cc": [
"https://infosec.exchange/users/ScumBots/followers"
],
"object": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113532520662485989",
"type": "Note",
"summary": null,
"inReplyTo": null,
"published": "2024-11-23T13:33:04Z",
"url": "https://infosec.exchange/@ScumBots/113532520662485989",
"attributedTo": "https://infosec.exchange/users/ScumBots",
"to": [
"https://www.w3.org/ns/activitystreams#Public"
],
"cc": [
"https://infosec.exchange/users/ScumBots/followers"
],
"sensitive": false,
"atomUri": "https://infosec.exchange/users/ScumBots/statuses/113532520662485989",
"inReplyToAtomUri": null,
"conversation": "tag:infosec.exchange,2024-11-23:objectId=215877911:objectType=Conversation",
"content": "<p><a href=\"https://infosec.exchange/tags/StagedC2\" class=\"mention hashtag\" rel=\"tag\">#<span>StagedC2</span></a> config observed at Sat Nov 23 13:04:08 2024 UTC, located at hXXps://pastebin[.]com/raw/iHes5JCc C2: awards-org[.]gl[.]at[.]ply[.]gg:3699 (IP: 147.185.221.24)</p>",
"contentMap": {
"en": "<p><a href=\"https://infosec.exchange/tags/StagedC2\" class=\"mention hashtag\" rel=\"tag\">#<span>StagedC2</span></a> config observed at Sat Nov 23 13:04:08 2024 UTC, located at hXXps://pastebin[.]com/raw/iHes5JCc C2: awards-org[.]gl[.]at[.]ply[.]gg:3699 (IP: 147.185.221.24)</p>"
},
"attachment": [],
"tag": [
{
"type": "Hashtag",
"href": "https://infosec.exchange/tags/stagedc2",
"name": "#stagedc2"
}
],
"replies": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113532520662485989/replies",
"type": "Collection",
"first": {
"type": "CollectionPage",
"next": "https://infosec.exchange/users/ScumBots/statuses/113532520662485989/replies?only_other_accounts=true&page=true",
"partOf": "https://infosec.exchange/users/ScumBots/statuses/113532520662485989/replies",
"items": []
}
},
"likes": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113532520662485989/likes",
"type": "Collection",
"totalItems": 0
},
"shares": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113532520662485989/shares",
"type": "Collection",
"totalItems": 0
}
}
},
{
"id": "https://infosec.exchange/users/ScumBots/statuses/113532288911895317/activity",
"type": "Create",
"actor": "https://infosec.exchange/users/ScumBots",
"published": "2024-11-23T12:34:08Z",
"to": [
"https://www.w3.org/ns/activitystreams#Public"
],
"cc": [
"https://infosec.exchange/users/ScumBots/followers"
],
"object": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113532288911895317",
"type": "Note",
"summary": null,
"inReplyTo": null,
"published": "2024-11-23T12:34:08Z",
"url": "https://infosec.exchange/@ScumBots/113532288911895317",
"attributedTo": "https://infosec.exchange/users/ScumBots",
"to": [
"https://www.w3.org/ns/activitystreams#Public"
],
"cc": [
"https://infosec.exchange/users/ScumBots/followers"
],
"sensitive": false,
"atomUri": "https://infosec.exchange/users/ScumBots/statuses/113532288911895317",
"inReplyToAtomUri": null,
"conversation": "tag:infosec.exchange,2024-11-23:objectId=215866198:objectType=Conversation",
"content": "<p><a href=\"https://infosec.exchange/tags/StagedC2\" class=\"mention hashtag\" rel=\"tag\">#<span>StagedC2</span></a> config observed at Sat Nov 23 12:21:18 2024 UTC, located at hXXps://pastebin[.]com/raw/aFS33xWF C2: venom[.]airdns[.]org:2301 (IP: 213.152.162.2)</p>",
"contentMap": {
"en": "<p><a href=\"https://infosec.exchange/tags/StagedC2\" class=\"mention hashtag\" rel=\"tag\">#<span>StagedC2</span></a> config observed at Sat Nov 23 12:21:18 2024 UTC, located at hXXps://pastebin[.]com/raw/aFS33xWF C2: venom[.]airdns[.]org:2301 (IP: 213.152.162.2)</p>"
},
"attachment": [],
"tag": [
{
"type": "Hashtag",
"href": "https://infosec.exchange/tags/stagedc2",
"name": "#stagedc2"
}
],
"replies": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113532288911895317/replies",
"type": "Collection",
"first": {
"type": "CollectionPage",
"next": "https://infosec.exchange/users/ScumBots/statuses/113532288911895317/replies?only_other_accounts=true&page=true",
"partOf": "https://infosec.exchange/users/ScumBots/statuses/113532288911895317/replies",
"items": []
}
},
"likes": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113532288911895317/likes",
"type": "Collection",
"totalItems": 0
},
"shares": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113532288911895317/shares",
"type": "Collection",
"totalItems": 0
}
}
},
{
"id": "https://infosec.exchange/users/ScumBots/statuses/113532284710522461/activity",
"type": "Create",
"actor": "https://infosec.exchange/users/ScumBots",
"published": "2024-11-23T12:33:04Z",
"to": [
"https://www.w3.org/ns/activitystreams#Public"
],
"cc": [
"https://infosec.exchange/users/ScumBots/followers"
],
"object": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113532284710522461",
"type": "Note",
"summary": null,
"inReplyTo": null,
"published": "2024-11-23T12:33:04Z",
"url": "https://infosec.exchange/@ScumBots/113532284710522461",
"attributedTo": "https://infosec.exchange/users/ScumBots",
"to": [
"https://www.w3.org/ns/activitystreams#Public"
],
"cc": [
"https://infosec.exchange/users/ScumBots/followers"
],
"sensitive": false,
"atomUri": "https://infosec.exchange/users/ScumBots/statuses/113532284710522461",
"inReplyToAtomUri": null,
"conversation": "tag:infosec.exchange,2024-11-23:objectId=215865900:objectType=Conversation",
"content": "<p><a href=\"https://infosec.exchange/tags/StagedC2\" class=\"mention hashtag\" rel=\"tag\">#<span>StagedC2</span></a> config observed at Sat Nov 23 12:20:02 2024 UTC, located at hXXps://pastebin[.]com/raw/sASLtxi0 C2: friendly-urge[.]gl[.]at[.]ply[.]gg:21425 (IP: 147.185.221.21)</p>",
"contentMap": {
"en": "<p><a href=\"https://infosec.exchange/tags/StagedC2\" class=\"mention hashtag\" rel=\"tag\">#<span>StagedC2</span></a> config observed at Sat Nov 23 12:20:02 2024 UTC, located at hXXps://pastebin[.]com/raw/sASLtxi0 C2: friendly-urge[.]gl[.]at[.]ply[.]gg:21425 (IP: 147.185.221.21)</p>"
},
"attachment": [],
"tag": [
{
"type": "Hashtag",
"href": "https://infosec.exchange/tags/stagedc2",
"name": "#stagedc2"
}
],
"replies": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113532284710522461/replies",
"type": "Collection",
"first": {
"type": "CollectionPage",
"next": "https://infosec.exchange/users/ScumBots/statuses/113532284710522461/replies?only_other_accounts=true&page=true",
"partOf": "https://infosec.exchange/users/ScumBots/statuses/113532284710522461/replies",
"items": []
}
},
"likes": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113532284710522461/likes",
"type": "Collection",
"totalItems": 0
},
"shares": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113532284710522461/shares",
"type": "Collection",
"totalItems": 0
}
}
},
{
"id": "https://infosec.exchange/users/ScumBots/statuses/113532046746117053/activity",
"type": "Create",
"actor": "https://infosec.exchange/users/ScumBots",
"published": "2024-11-23T11:32:33Z",
"to": [
"https://www.w3.org/ns/activitystreams#Public"
],
"cc": [
"https://infosec.exchange/users/ScumBots/followers"
],
"object": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113532046746117053",
"type": "Note",
"summary": null,
"inReplyTo": null,
"published": "2024-11-23T11:32:33Z",
"url": "https://infosec.exchange/@ScumBots/113532046746117053",
"attributedTo": "https://infosec.exchange/users/ScumBots",
"to": [
"https://www.w3.org/ns/activitystreams#Public"
],
"cc": [
"https://infosec.exchange/users/ScumBots/followers"
],
"sensitive": false,
"atomUri": "https://infosec.exchange/users/ScumBots/statuses/113532046746117053",
"inReplyToAtomUri": null,
"conversation": "tag:infosec.exchange,2024-11-23:objectId=215854261:objectType=Conversation",
"content": "<p><a href=\"https://infosec.exchange/tags/StagedC2\" class=\"mention hashtag\" rel=\"tag\">#<span>StagedC2</span></a> config observed at Sat Nov 23 10:55:06 2024 UTC, located at hXXps://pastebin[.]com/raw/p4CtWtj7 C2: 209[.]38[.]154[.]253:37452</p>",
"contentMap": {
"en": "<p><a href=\"https://infosec.exchange/tags/StagedC2\" class=\"mention hashtag\" rel=\"tag\">#<span>StagedC2</span></a> config observed at Sat Nov 23 10:55:06 2024 UTC, located at hXXps://pastebin[.]com/raw/p4CtWtj7 C2: 209[.]38[.]154[.]253:37452</p>"
},
"attachment": [],
"tag": [
{
"type": "Hashtag",
"href": "https://infosec.exchange/tags/stagedc2",
"name": "#stagedc2"
}
],
"replies": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113532046746117053/replies",
"type": "Collection",
"first": {
"type": "CollectionPage",
"next": "https://infosec.exchange/users/ScumBots/statuses/113532046746117053/replies?only_other_accounts=true&page=true",
"partOf": "https://infosec.exchange/users/ScumBots/statuses/113532046746117053/replies",
"items": []
}
},
"likes": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113532046746117053/likes",
"type": "Collection",
"totalItems": 0
},
"shares": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113532046746117053/shares",
"type": "Collection",
"totalItems": 0
}
}
},
{
"id": "https://infosec.exchange/users/ScumBots/statuses/113530159361583928/activity",
"type": "Create",
"actor": "https://infosec.exchange/users/ScumBots",
"published": "2024-11-23T03:32:33Z",
"to": [
"https://www.w3.org/ns/activitystreams#Public"
],
"cc": [
"https://infosec.exchange/users/ScumBots/followers"
],
"object": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113530159361583928",
"type": "Note",
"summary": null,
"inReplyTo": null,
"published": "2024-11-23T03:32:33Z",
"url": "https://infosec.exchange/@ScumBots/113530159361583928",
"attributedTo": "https://infosec.exchange/users/ScumBots",
"to": [
"https://www.w3.org/ns/activitystreams#Public"
],
"cc": [
"https://infosec.exchange/users/ScumBots/followers"
],
"sensitive": false,
"atomUri": "https://infosec.exchange/users/ScumBots/statuses/113530159361583928",
"inReplyToAtomUri": null,
"conversation": "tag:infosec.exchange,2024-11-23:objectId=215778689:objectType=Conversation",
"content": "<p><a href=\"https://infosec.exchange/tags/StagedC2\" class=\"mention hashtag\" rel=\"tag\">#<span>StagedC2</span></a> config observed at Sat Nov 23 03:24:03 2024 UTC, located at hXXps://pastebin[.]com/raw/chWSwzTy C2: 147[.]185[.]221[.]23:62437</p>",
"contentMap": {
"en": "<p><a href=\"https://infosec.exchange/tags/StagedC2\" class=\"mention hashtag\" rel=\"tag\">#<span>StagedC2</span></a> config observed at Sat Nov 23 03:24:03 2024 UTC, located at hXXps://pastebin[.]com/raw/chWSwzTy C2: 147[.]185[.]221[.]23:62437</p>"
},
"attachment": [],
"tag": [
{
"type": "Hashtag",
"href": "https://infosec.exchange/tags/stagedc2",
"name": "#stagedc2"
}
],
"replies": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113530159361583928/replies",
"type": "Collection",
"first": {
"type": "CollectionPage",
"next": "https://infosec.exchange/users/ScumBots/statuses/113530159361583928/replies?only_other_accounts=true&page=true",
"partOf": "https://infosec.exchange/users/ScumBots/statuses/113530159361583928/replies",
"items": []
}
},
"likes": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113530159361583928/likes",
"type": "Collection",
"totalItems": 0
},
"shares": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113530159361583928/shares",
"type": "Collection",
"totalItems": 0
}
}
},
{
"id": "https://infosec.exchange/users/ScumBots/statuses/113528979653246210/activity",
"type": "Create",
"actor": "https://infosec.exchange/users/ScumBots",
"published": "2024-11-22T22:32:33Z",
"to": [
"https://www.w3.org/ns/activitystreams#Public"
],
"cc": [
"https://infosec.exchange/users/ScumBots/followers"
],
"object": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113528979653246210",
"type": "Note",
"summary": null,
"inReplyTo": null,
"published": "2024-11-22T22:32:33Z",
"url": "https://infosec.exchange/@ScumBots/113528979653246210",
"attributedTo": "https://infosec.exchange/users/ScumBots",
"to": [
"https://www.w3.org/ns/activitystreams#Public"
],
"cc": [
"https://infosec.exchange/users/ScumBots/followers"
],
"sensitive": false,
"atomUri": "https://infosec.exchange/users/ScumBots/statuses/113528979653246210",
"inReplyToAtomUri": null,
"conversation": "tag:infosec.exchange,2024-11-22:objectId=215723190:objectType=Conversation",
"content": "<p><a href=\"https://infosec.exchange/tags/StagedC2\" class=\"mention hashtag\" rel=\"tag\">#<span>StagedC2</span></a> config observed at Fri Nov 22 22:29:05 2024 UTC, located at hXXps://pastebin[.]com/raw/cXxH9uvn C2: 91[.]200[.]220[.]130:7000</p>",
"contentMap": {
"en": "<p><a href=\"https://infosec.exchange/tags/StagedC2\" class=\"mention hashtag\" rel=\"tag\">#<span>StagedC2</span></a> config observed at Fri Nov 22 22:29:05 2024 UTC, located at hXXps://pastebin[.]com/raw/cXxH9uvn C2: 91[.]200[.]220[.]130:7000</p>"
},
"attachment": [],
"tag": [
{
"type": "Hashtag",
"href": "https://infosec.exchange/tags/stagedc2",
"name": "#stagedc2"
}
],
"replies": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113528979653246210/replies",
"type": "Collection",
"first": {
"type": "CollectionPage",
"next": "https://infosec.exchange/users/ScumBots/statuses/113528979653246210/replies?only_other_accounts=true&page=true",
"partOf": "https://infosec.exchange/users/ScumBots/statuses/113528979653246210/replies",
"items": []
}
},
"likes": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113528979653246210/likes",
"type": "Collection",
"totalItems": 0
},
"shares": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113528979653246210/shares",
"type": "Collection",
"totalItems": 0
}
}
},
{
"id": "https://infosec.exchange/users/ScumBots/statuses/113528509864586132/activity",
"type": "Create",
"actor": "https://infosec.exchange/users/ScumBots",
"published": "2024-11-22T20:33:04Z",
"to": [
"https://www.w3.org/ns/activitystreams#Public"
],
"cc": [
"https://infosec.exchange/users/ScumBots/followers"
],
"object": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113528509864586132",
"type": "Note",
"summary": null,
"inReplyTo": null,
"published": "2024-11-22T20:33:04Z",
"url": "https://infosec.exchange/@ScumBots/113528509864586132",
"attributedTo": "https://infosec.exchange/users/ScumBots",
"to": [
"https://www.w3.org/ns/activitystreams#Public"
],
"cc": [
"https://infosec.exchange/users/ScumBots/followers"
],
"sensitive": false,
"atomUri": "https://infosec.exchange/users/ScumBots/statuses/113528509864586132",
"inReplyToAtomUri": null,
"conversation": "tag:infosec.exchange,2024-11-22:objectId=215693469:objectType=Conversation",
"content": "<p><a href=\"https://infosec.exchange/tags/StagedC2\" class=\"mention hashtag\" rel=\"tag\">#<span>StagedC2</span></a> config observed at Fri Nov 22 19:48:04 2024 UTC, located at hXXps://pastebin[.]com/raw/Ne1dTR0q C2: 55e5-80-70-109-252[.]ngrok-free[.]app:4040 (IP: 3.14.182.203)</p>",
"contentMap": {
"en": "<p><a href=\"https://infosec.exchange/tags/StagedC2\" class=\"mention hashtag\" rel=\"tag\">#<span>StagedC2</span></a> config observed at Fri Nov 22 19:48:04 2024 UTC, located at hXXps://pastebin[.]com/raw/Ne1dTR0q C2: 55e5-80-70-109-252[.]ngrok-free[.]app:4040 (IP: 3.14.182.203)</p>"
},
"attachment": [],
"tag": [
{
"type": "Hashtag",
"href": "https://infosec.exchange/tags/stagedc2",
"name": "#stagedc2"
}
],
"replies": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113528509864586132/replies",
"type": "Collection",
"first": {
"type": "CollectionPage",
"next": "https://infosec.exchange/users/ScumBots/statuses/113528509864586132/replies?only_other_accounts=true&page=true",
"partOf": "https://infosec.exchange/users/ScumBots/statuses/113528509864586132/replies",
"items": []
}
},
"likes": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113528509864586132/likes",
"type": "Collection",
"totalItems": 0
},
"shares": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113528509864586132/shares",
"type": "Collection",
"totalItems": 0
}
}
},
{
"id": "https://infosec.exchange/users/ScumBots/statuses/113528273926076408/activity",
"type": "Create",
"actor": "https://infosec.exchange/users/ScumBots",
"published": "2024-11-22T19:33:04Z",
"to": [
"https://www.w3.org/ns/activitystreams#Public"
],
"cc": [
"https://infosec.exchange/users/ScumBots/followers"
],
"object": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113528273926076408",
"type": "Note",
"summary": null,
"inReplyTo": null,
"published": "2024-11-22T19:33:04Z",
"url": "https://infosec.exchange/@ScumBots/113528273926076408",
"attributedTo": "https://infosec.exchange/users/ScumBots",
"to": [
"https://www.w3.org/ns/activitystreams#Public"
],
"cc": [
"https://infosec.exchange/users/ScumBots/followers"
],
"sensitive": false,
"atomUri": "https://infosec.exchange/users/ScumBots/statuses/113528273926076408",
"inReplyToAtomUri": null,
"conversation": "tag:infosec.exchange,2024-11-22:objectId=215677541:objectType=Conversation",
"content": "<p><a href=\"https://infosec.exchange/tags/StagedC2\" class=\"mention hashtag\" rel=\"tag\">#<span>StagedC2</span></a> config observed at Fri Nov 22 19:05:04 2024 UTC, located at hXXps://pastebin[.]com/raw/D1XBg70y C2: called-niagara[.]gl[.]at[.]ply[.]gg:2779 (IP: 147.185.221.24)</p>",
"contentMap": {
"en": "<p><a href=\"https://infosec.exchange/tags/StagedC2\" class=\"mention hashtag\" rel=\"tag\">#<span>StagedC2</span></a> config observed at Fri Nov 22 19:05:04 2024 UTC, located at hXXps://pastebin[.]com/raw/D1XBg70y C2: called-niagara[.]gl[.]at[.]ply[.]gg:2779 (IP: 147.185.221.24)</p>"
},
"attachment": [],
"tag": [
{
"type": "Hashtag",
"href": "https://infosec.exchange/tags/stagedc2",
"name": "#stagedc2"
}
],
"replies": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113528273926076408/replies",
"type": "Collection",
"first": {
"type": "CollectionPage",
"next": "https://infosec.exchange/users/ScumBots/statuses/113528273926076408/replies?only_other_accounts=true&page=true",
"partOf": "https://infosec.exchange/users/ScumBots/statuses/113528273926076408/replies",
"items": []
}
},
"likes": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113528273926076408/likes",
"type": "Collection",
"totalItems": 0
},
"shares": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113528273926076408/shares",
"type": "Collection",
"totalItems": 0
}
}
},
{
"id": "https://infosec.exchange/users/ScumBots/statuses/113528042157764728/activity",
"type": "Create",
"actor": "https://infosec.exchange/users/ScumBots",
"published": "2024-11-22T18:34:07Z",
"to": [
"https://www.w3.org/ns/activitystreams#Public"
],
"cc": [
"https://infosec.exchange/users/ScumBots/followers"
],
"object": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113528042157764728",
"type": "Note",
"summary": null,
"inReplyTo": null,
"published": "2024-11-22T18:34:07Z",
"url": "https://infosec.exchange/@ScumBots/113528042157764728",
"attributedTo": "https://infosec.exchange/users/ScumBots",
"to": [
"https://www.w3.org/ns/activitystreams#Public"
],
"cc": [
"https://infosec.exchange/users/ScumBots/followers"
],
"sensitive": false,
"atomUri": "https://infosec.exchange/users/ScumBots/statuses/113528042157764728",
"inReplyToAtomUri": null,
"conversation": "tag:infosec.exchange,2024-11-22:objectId=215661202:objectType=Conversation",
"content": "<p><a href=\"https://infosec.exchange/tags/StagedC2\" class=\"mention hashtag\" rel=\"tag\">#<span>StagedC2</span></a> config observed at Fri Nov 22 17:54:06 2024 UTC, located at hXXps://pastebin[.]com/raw/ir611m8s C2: really-laos[.]gl[.]at[.]ply[.]gg:2669 (IP: 147.185.221.24)</p>",
"contentMap": {
"en": "<p><a href=\"https://infosec.exchange/tags/StagedC2\" class=\"mention hashtag\" rel=\"tag\">#<span>StagedC2</span></a> config observed at Fri Nov 22 17:54:06 2024 UTC, located at hXXps://pastebin[.]com/raw/ir611m8s C2: really-laos[.]gl[.]at[.]ply[.]gg:2669 (IP: 147.185.221.24)</p>"
},
"attachment": [],
"tag": [
{
"type": "Hashtag",
"href": "https://infosec.exchange/tags/stagedc2",
"name": "#stagedc2"
}
],
"replies": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113528042157764728/replies",
"type": "Collection",
"first": {
"type": "CollectionPage",
"next": "https://infosec.exchange/users/ScumBots/statuses/113528042157764728/replies?only_other_accounts=true&page=true",
"partOf": "https://infosec.exchange/users/ScumBots/statuses/113528042157764728/replies",
"items": []
}
},
"likes": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113528042157764728/likes",
"type": "Collection",
"totalItems": 0
},
"shares": {
"id": "https://infosec.exchange/users/ScumBots/statuses/113528042157764728/shares",
"type": "Collection",
"totalItems": 0
}
}
}
]
}