A small tool to view real-world ActivityPub objects as JSON! Enter a URL
or username from Mastodon or a similar service below, and we'll send a
request with
the right
Accept
header
to the server to view the underlying object.
{
"@context": [
"https://www.w3.org/ns/activitystreams",
{
"ostatus": "http://ostatus.org#",
"atomUri": "ostatus:atomUri",
"inReplyToAtomUri": "ostatus:inReplyToAtomUri",
"conversation": "ostatus:conversation",
"sensitive": "as:sensitive",
"toot": "http://joinmastodon.org/ns#",
"votersCount": "toot:votersCount",
"Hashtag": "as:Hashtag"
}
],
"id": "https://social.raytec.co/users/techbot/statuses/114315454749726587",
"type": "Note",
"summary": null,
"inReplyTo": null,
"published": "2025-04-10T20:03:30Z",
"url": "https://social.raytec.co/@techbot/114315454749726587",
"attributedTo": "https://social.raytec.co/users/techbot",
"to": [
"https://www.w3.org/ns/activitystreams#Public"
],
"cc": [
"https://social.raytec.co/users/techbot/followers"
],
"sensitive": false,
"atomUri": "https://social.raytec.co/users/techbot/statuses/114315454749726587",
"inReplyToAtomUri": null,
"conversation": "tag:social.raytec.co,2025-04-10:objectId=17020241:objectType=Conversation",
"content": "<p>Newly Registered Domains Distributing SpyNote Malware</p><p>Deceptive websites hosted on newly registered domains are being used to deliver AndroidOS SpyNote malware, mimicking the Google Chrome install page on the Google Play Store. The campaign utilizes a mix of English and Chinese-language delivery sites, with Chinese-language comments in the code. The malware is distributed through a two-stage installation process, using an APK dropper to deploy the core SpyNote RAT. SpyNote is a potent Android remote access trojan capable of extensive surveillance, data exfiltration, and remote control. It aggressively requests numerous intrusive permissions, allowing for theft of sensitive data and significant remote access capabilities. The malware's keylogging functionality and ability to manipulate calls, activate cameras and microphones, and remotely wipe data make it a formidable tool for espionage and cybercrime.</p><p>Pulse ID: 67f80a4aa4c9d5d796071af6<br />Pulse Link: <a href=\"https://otx.alienvault.com/pulse/67f80a4aa4c9d5d796071af6\" target=\"_blank\" rel=\"nofollow noopener noreferrer\" translate=\"no\"><span class=\"invisible\">https://</span><span class=\"ellipsis\">otx.alienvault.com/pulse/67f80</span><span class=\"invisible\">a4aa4c9d5d796071af6</span></a> <br />Pulse Author: AlienVault<br />Created: 2025-04-10 18:13:30</p><p>Be advised, this data is unverified and should be considered preliminary. Always do further verification.</p><p><a href=\"https://social.raytec.co/tags/APK\" class=\"mention hashtag\" rel=\"tag\">#<span>APK</span></a> <a href=\"https://social.raytec.co/tags/Android\" class=\"mention hashtag\" rel=\"tag\">#<span>Android</span></a> <a href=\"https://social.raytec.co/tags/Chinese\" class=\"mention hashtag\" rel=\"tag\">#<span>Chinese</span></a> <a href=\"https://social.raytec.co/tags/Chrome\" class=\"mention hashtag\" rel=\"tag\">#<span>Chrome</span></a> <a href=\"https://social.raytec.co/tags/CyberCrime\" class=\"mention hashtag\" rel=\"tag\">#<span>CyberCrime</span></a> <a href=\"https://social.raytec.co/tags/CyberSecurity\" class=\"mention hashtag\" rel=\"tag\">#<span>CyberSecurity</span></a> <a href=\"https://social.raytec.co/tags/DoS\" class=\"mention hashtag\" rel=\"tag\">#<span>DoS</span></a> <a href=\"https://social.raytec.co/tags/Espionage\" class=\"mention hashtag\" rel=\"tag\">#<span>Espionage</span></a> <a href=\"https://social.raytec.co/tags/Google\" class=\"mention hashtag\" rel=\"tag\">#<span>Google</span></a> <a href=\"https://social.raytec.co/tags/GooglePlay\" class=\"mention hashtag\" rel=\"tag\">#<span>GooglePlay</span></a> <a href=\"https://social.raytec.co/tags/InfoSec\" class=\"mention hashtag\" rel=\"tag\">#<span>InfoSec</span></a> <a href=\"https://social.raytec.co/tags/Malware\" class=\"mention hashtag\" rel=\"tag\">#<span>Malware</span></a> <a href=\"https://social.raytec.co/tags/Mimic\" class=\"mention hashtag\" rel=\"tag\">#<span>Mimic</span></a> <a href=\"https://social.raytec.co/tags/OTX\" class=\"mention hashtag\" rel=\"tag\">#<span>OTX</span></a> <a href=\"https://social.raytec.co/tags/OpenThreatExchange\" class=\"mention hashtag\" rel=\"tag\">#<span>OpenThreatExchange</span></a> <a href=\"https://social.raytec.co/tags/RAT\" class=\"mention hashtag\" rel=\"tag\">#<span>RAT</span></a> <a href=\"https://social.raytec.co/tags/RemoteAccessTrojan\" class=\"mention hashtag\" rel=\"tag\">#<span>RemoteAccessTrojan</span></a> <a href=\"https://social.raytec.co/tags/SpyNote\" class=\"mention hashtag\" rel=\"tag\">#<span>SpyNote</span></a> <a href=\"https://social.raytec.co/tags/Trojan\" class=\"mention hashtag\" rel=\"tag\">#<span>Trojan</span></a> <a href=\"https://social.raytec.co/tags/bot\" class=\"mention hashtag\" rel=\"tag\">#<span>bot</span></a> <a href=\"https://social.raytec.co/tags/AlienVault\" class=\"mention hashtag\" rel=\"tag\">#<span>AlienVault</span></a></p>",
"contentMap": {
"en": "<p>Newly Registered Domains Distributing SpyNote Malware</p><p>Deceptive websites hosted on newly registered domains are being used to deliver AndroidOS SpyNote malware, mimicking the Google Chrome install page on the Google Play Store. The campaign utilizes a mix of English and Chinese-language delivery sites, with Chinese-language comments in the code. The malware is distributed through a two-stage installation process, using an APK dropper to deploy the core SpyNote RAT. SpyNote is a potent Android remote access trojan capable of extensive surveillance, data exfiltration, and remote control. It aggressively requests numerous intrusive permissions, allowing for theft of sensitive data and significant remote access capabilities. The malware's keylogging functionality and ability to manipulate calls, activate cameras and microphones, and remotely wipe data make it a formidable tool for espionage and cybercrime.</p><p>Pulse ID: 67f80a4aa4c9d5d796071af6<br />Pulse Link: <a href=\"https://otx.alienvault.com/pulse/67f80a4aa4c9d5d796071af6\" target=\"_blank\" rel=\"nofollow noopener noreferrer\" translate=\"no\"><span class=\"invisible\">https://</span><span class=\"ellipsis\">otx.alienvault.com/pulse/67f80</span><span class=\"invisible\">a4aa4c9d5d796071af6</span></a> <br />Pulse Author: AlienVault<br />Created: 2025-04-10 18:13:30</p><p>Be advised, this data is unverified and should be considered preliminary. Always do further verification.</p><p><a href=\"https://social.raytec.co/tags/APK\" class=\"mention hashtag\" rel=\"tag\">#<span>APK</span></a> <a href=\"https://social.raytec.co/tags/Android\" class=\"mention hashtag\" rel=\"tag\">#<span>Android</span></a> <a href=\"https://social.raytec.co/tags/Chinese\" class=\"mention hashtag\" rel=\"tag\">#<span>Chinese</span></a> <a href=\"https://social.raytec.co/tags/Chrome\" class=\"mention hashtag\" rel=\"tag\">#<span>Chrome</span></a> <a href=\"https://social.raytec.co/tags/CyberCrime\" class=\"mention hashtag\" rel=\"tag\">#<span>CyberCrime</span></a> <a href=\"https://social.raytec.co/tags/CyberSecurity\" class=\"mention hashtag\" rel=\"tag\">#<span>CyberSecurity</span></a> <a href=\"https://social.raytec.co/tags/DoS\" class=\"mention hashtag\" rel=\"tag\">#<span>DoS</span></a> <a href=\"https://social.raytec.co/tags/Espionage\" class=\"mention hashtag\" rel=\"tag\">#<span>Espionage</span></a> <a href=\"https://social.raytec.co/tags/Google\" class=\"mention hashtag\" rel=\"tag\">#<span>Google</span></a> <a href=\"https://social.raytec.co/tags/GooglePlay\" class=\"mention hashtag\" rel=\"tag\">#<span>GooglePlay</span></a> <a href=\"https://social.raytec.co/tags/InfoSec\" class=\"mention hashtag\" rel=\"tag\">#<span>InfoSec</span></a> <a href=\"https://social.raytec.co/tags/Malware\" class=\"mention hashtag\" rel=\"tag\">#<span>Malware</span></a> <a href=\"https://social.raytec.co/tags/Mimic\" class=\"mention hashtag\" rel=\"tag\">#<span>Mimic</span></a> <a href=\"https://social.raytec.co/tags/OTX\" class=\"mention hashtag\" rel=\"tag\">#<span>OTX</span></a> <a href=\"https://social.raytec.co/tags/OpenThreatExchange\" class=\"mention hashtag\" rel=\"tag\">#<span>OpenThreatExchange</span></a> <a href=\"https://social.raytec.co/tags/RAT\" class=\"mention hashtag\" rel=\"tag\">#<span>RAT</span></a> <a href=\"https://social.raytec.co/tags/RemoteAccessTrojan\" class=\"mention hashtag\" rel=\"tag\">#<span>RemoteAccessTrojan</span></a> <a href=\"https://social.raytec.co/tags/SpyNote\" class=\"mention hashtag\" rel=\"tag\">#<span>SpyNote</span></a> <a href=\"https://social.raytec.co/tags/Trojan\" class=\"mention hashtag\" rel=\"tag\">#<span>Trojan</span></a> <a href=\"https://social.raytec.co/tags/bot\" class=\"mention hashtag\" rel=\"tag\">#<span>bot</span></a> <a href=\"https://social.raytec.co/tags/AlienVault\" class=\"mention hashtag\" rel=\"tag\">#<span>AlienVault</span></a></p>"
},
"attachment": [],
"tag": [
{
"type": "Hashtag",
"href": "https://social.raytec.co/tags/apk",
"name": "#apk"
},
{
"type": "Hashtag",
"href": "https://social.raytec.co/tags/android",
"name": "#android"
},
{
"type": "Hashtag",
"href": "https://social.raytec.co/tags/chinese",
"name": "#chinese"
},
{
"type": "Hashtag",
"href": "https://social.raytec.co/tags/Chrome",
"name": "#Chrome"
},
{
"type": "Hashtag",
"href": "https://social.raytec.co/tags/cybercrime",
"name": "#cybercrime"
},
{
"type": "Hashtag",
"href": "https://social.raytec.co/tags/cybersecurity",
"name": "#cybersecurity"
},
{
"type": "Hashtag",
"href": "https://social.raytec.co/tags/dos",
"name": "#dos"
},
{
"type": "Hashtag",
"href": "https://social.raytec.co/tags/espionage",
"name": "#espionage"
},
{
"type": "Hashtag",
"href": "https://social.raytec.co/tags/google",
"name": "#google"
},
{
"type": "Hashtag",
"href": "https://social.raytec.co/tags/googleplay",
"name": "#googleplay"
},
{
"type": "Hashtag",
"href": "https://social.raytec.co/tags/infosec",
"name": "#infosec"
},
{
"type": "Hashtag",
"href": "https://social.raytec.co/tags/malware",
"name": "#malware"
},
{
"type": "Hashtag",
"href": "https://social.raytec.co/tags/mimic",
"name": "#mimic"
},
{
"type": "Hashtag",
"href": "https://social.raytec.co/tags/otx",
"name": "#otx"
},
{
"type": "Hashtag",
"href": "https://social.raytec.co/tags/openthreatexchange",
"name": "#openthreatexchange"
},
{
"type": "Hashtag",
"href": "https://social.raytec.co/tags/rat",
"name": "#rat"
},
{
"type": "Hashtag",
"href": "https://social.raytec.co/tags/remoteaccesstrojan",
"name": "#remoteaccesstrojan"
},
{
"type": "Hashtag",
"href": "https://social.raytec.co/tags/spynote",
"name": "#spynote"
},
{
"type": "Hashtag",
"href": "https://social.raytec.co/tags/trojan",
"name": "#trojan"
},
{
"type": "Hashtag",
"href": "https://social.raytec.co/tags/bot",
"name": "#bot"
},
{
"type": "Hashtag",
"href": "https://social.raytec.co/tags/alienvault",
"name": "#alienvault"
}
],
"replies": {
"id": "https://social.raytec.co/users/techbot/statuses/114315454749726587/replies",
"type": "Collection",
"first": {
"type": "CollectionPage",
"next": "https://social.raytec.co/users/techbot/statuses/114315454749726587/replies?only_other_accounts=true&page=true",
"partOf": "https://social.raytec.co/users/techbot/statuses/114315454749726587/replies",
"items": []
}
},
"likes": {
"id": "https://social.raytec.co/users/techbot/statuses/114315454749726587/likes",
"type": "Collection",
"totalItems": 1
},
"shares": {
"id": "https://social.raytec.co/users/techbot/statuses/114315454749726587/shares",
"type": "Collection",
"totalItems": 1
}
}