A small tool to view real-world ActivityPub objects as JSON! Enter a URL
or username from Mastodon or a similar service below, and we'll send a
request with
the right
Accept
header
to the server to view the underlying object.
{
"@context": [
"https://www.w3.org/ns/activitystreams",
{
"ostatus": "http://ostatus.org#",
"atomUri": "ostatus:atomUri",
"inReplyToAtomUri": "ostatus:inReplyToAtomUri",
"conversation": "ostatus:conversation",
"sensitive": "as:sensitive",
"toot": "http://joinmastodon.org/ns#",
"votersCount": "toot:votersCount",
"Hashtag": "as:Hashtag"
}
],
"id": "https://social.raytec.co/users/techbot/statuses/114347896006496381",
"type": "Note",
"summary": null,
"inReplyTo": null,
"published": "2025-04-16T13:33:44Z",
"url": "https://social.raytec.co/@techbot/114347896006496381",
"attributedTo": "https://social.raytec.co/users/techbot",
"to": [
"https://www.w3.org/ns/activitystreams#Public"
],
"cc": [
"https://social.raytec.co/users/techbot/followers"
],
"sensitive": false,
"atomUri": "https://social.raytec.co/users/techbot/statuses/114347896006496381",
"inReplyToAtomUri": null,
"conversation": "tag:social.raytec.co,2025-04-16:objectId=17105573:objectType=Conversation",
"content": "<p>Newly Registered Domains Distributing SpyNote Malware</p><p>Cybercriminals are employing deceptive websites on newly registered domains to distribute AndroidOS SpyNote malware. These sites imitate the Google Chrome install page on the Google Play Store, tricking users into downloading SpyNote, a powerful Android remote access trojan. SpyNote is used for surveillance, data exfiltration, and remote control of infected devices. The investigation uncovered multiple domains, IP addresses, and APK files associated with this campaign. The malware utilizes various C2 endpoints for communication and data exfiltration, with functions designed to retrieve and manipulate device information, contacts, SMS, and applications.</p><p>Pulse ID: 67feb504b76dd387be73309b<br />Pulse Link: <a href=\"https://otx.alienvault.com/pulse/67feb504b76dd387be73309b\" target=\"_blank\" rel=\"nofollow noopener noreferrer\" translate=\"no\"><span class=\"invisible\">https://</span><span class=\"ellipsis\">otx.alienvault.com/pulse/67feb</span><span class=\"invisible\">504b76dd387be73309b</span></a> <br />Pulse Author: AlienVault<br />Created: 2025-04-15 19:35:32</p><p>Be advised, this data is unverified and should be considered preliminary. Always do further verification.</p><p><a href=\"https://social.raytec.co/tags/APK\" class=\"mention hashtag\" rel=\"tag\">#<span>APK</span></a> <a href=\"https://social.raytec.co/tags/Android\" class=\"mention hashtag\" rel=\"tag\">#<span>Android</span></a> <a href=\"https://social.raytec.co/tags/Chrome\" class=\"mention hashtag\" rel=\"tag\">#<span>Chrome</span></a> <a href=\"https://social.raytec.co/tags/CyberSecurity\" class=\"mention hashtag\" rel=\"tag\">#<span>CyberSecurity</span></a> <a href=\"https://social.raytec.co/tags/DoS\" class=\"mention hashtag\" rel=\"tag\">#<span>DoS</span></a> <a href=\"https://social.raytec.co/tags/Endpoint\" class=\"mention hashtag\" rel=\"tag\">#<span>Endpoint</span></a> <a href=\"https://social.raytec.co/tags/Google\" class=\"mention hashtag\" rel=\"tag\">#<span>Google</span></a> <a href=\"https://social.raytec.co/tags/GooglePlay\" class=\"mention hashtag\" rel=\"tag\">#<span>GooglePlay</span></a> <a href=\"https://social.raytec.co/tags/InfoSec\" class=\"mention hashtag\" rel=\"tag\">#<span>InfoSec</span></a> <a href=\"https://social.raytec.co/tags/Malware\" class=\"mention hashtag\" rel=\"tag\">#<span>Malware</span></a> <a href=\"https://social.raytec.co/tags/OTX\" class=\"mention hashtag\" rel=\"tag\">#<span>OTX</span></a> <a href=\"https://social.raytec.co/tags/OpenThreatExchange\" class=\"mention hashtag\" rel=\"tag\">#<span>OpenThreatExchange</span></a> <a href=\"https://social.raytec.co/tags/RAT\" class=\"mention hashtag\" rel=\"tag\">#<span>RAT</span></a> <a href=\"https://social.raytec.co/tags/RemoteAccessTrojan\" class=\"mention hashtag\" rel=\"tag\">#<span>RemoteAccessTrojan</span></a> <a href=\"https://social.raytec.co/tags/SMS\" class=\"mention hashtag\" rel=\"tag\">#<span>SMS</span></a> <a href=\"https://social.raytec.co/tags/SpyNote\" class=\"mention hashtag\" rel=\"tag\">#<span>SpyNote</span></a> <a href=\"https://social.raytec.co/tags/Trojan\" class=\"mention hashtag\" rel=\"tag\">#<span>Trojan</span></a> <a href=\"https://social.raytec.co/tags/bot\" class=\"mention hashtag\" rel=\"tag\">#<span>bot</span></a> <a href=\"https://social.raytec.co/tags/AlienVault\" class=\"mention hashtag\" rel=\"tag\">#<span>AlienVault</span></a></p>",
"contentMap": {
"en": "<p>Newly Registered Domains Distributing SpyNote Malware</p><p>Cybercriminals are employing deceptive websites on newly registered domains to distribute AndroidOS SpyNote malware. These sites imitate the Google Chrome install page on the Google Play Store, tricking users into downloading SpyNote, a powerful Android remote access trojan. SpyNote is used for surveillance, data exfiltration, and remote control of infected devices. The investigation uncovered multiple domains, IP addresses, and APK files associated with this campaign. The malware utilizes various C2 endpoints for communication and data exfiltration, with functions designed to retrieve and manipulate device information, contacts, SMS, and applications.</p><p>Pulse ID: 67feb504b76dd387be73309b<br />Pulse Link: <a href=\"https://otx.alienvault.com/pulse/67feb504b76dd387be73309b\" target=\"_blank\" rel=\"nofollow noopener noreferrer\" translate=\"no\"><span class=\"invisible\">https://</span><span class=\"ellipsis\">otx.alienvault.com/pulse/67feb</span><span class=\"invisible\">504b76dd387be73309b</span></a> <br />Pulse Author: AlienVault<br />Created: 2025-04-15 19:35:32</p><p>Be advised, this data is unverified and should be considered preliminary. Always do further verification.</p><p><a href=\"https://social.raytec.co/tags/APK\" class=\"mention hashtag\" rel=\"tag\">#<span>APK</span></a> <a href=\"https://social.raytec.co/tags/Android\" class=\"mention hashtag\" rel=\"tag\">#<span>Android</span></a> <a href=\"https://social.raytec.co/tags/Chrome\" class=\"mention hashtag\" rel=\"tag\">#<span>Chrome</span></a> <a href=\"https://social.raytec.co/tags/CyberSecurity\" class=\"mention hashtag\" rel=\"tag\">#<span>CyberSecurity</span></a> <a href=\"https://social.raytec.co/tags/DoS\" class=\"mention hashtag\" rel=\"tag\">#<span>DoS</span></a> <a href=\"https://social.raytec.co/tags/Endpoint\" class=\"mention hashtag\" rel=\"tag\">#<span>Endpoint</span></a> <a href=\"https://social.raytec.co/tags/Google\" class=\"mention hashtag\" rel=\"tag\">#<span>Google</span></a> <a href=\"https://social.raytec.co/tags/GooglePlay\" class=\"mention hashtag\" rel=\"tag\">#<span>GooglePlay</span></a> <a href=\"https://social.raytec.co/tags/InfoSec\" class=\"mention hashtag\" rel=\"tag\">#<span>InfoSec</span></a> <a href=\"https://social.raytec.co/tags/Malware\" class=\"mention hashtag\" rel=\"tag\">#<span>Malware</span></a> <a href=\"https://social.raytec.co/tags/OTX\" class=\"mention hashtag\" rel=\"tag\">#<span>OTX</span></a> <a href=\"https://social.raytec.co/tags/OpenThreatExchange\" class=\"mention hashtag\" rel=\"tag\">#<span>OpenThreatExchange</span></a> <a href=\"https://social.raytec.co/tags/RAT\" class=\"mention hashtag\" rel=\"tag\">#<span>RAT</span></a> <a href=\"https://social.raytec.co/tags/RemoteAccessTrojan\" class=\"mention hashtag\" rel=\"tag\">#<span>RemoteAccessTrojan</span></a> <a href=\"https://social.raytec.co/tags/SMS\" class=\"mention hashtag\" rel=\"tag\">#<span>SMS</span></a> <a href=\"https://social.raytec.co/tags/SpyNote\" class=\"mention hashtag\" rel=\"tag\">#<span>SpyNote</span></a> <a href=\"https://social.raytec.co/tags/Trojan\" class=\"mention hashtag\" rel=\"tag\">#<span>Trojan</span></a> <a href=\"https://social.raytec.co/tags/bot\" class=\"mention hashtag\" rel=\"tag\">#<span>bot</span></a> <a href=\"https://social.raytec.co/tags/AlienVault\" class=\"mention hashtag\" rel=\"tag\">#<span>AlienVault</span></a></p>"
},
"attachment": [],
"tag": [
{
"type": "Hashtag",
"href": "https://social.raytec.co/tags/apk",
"name": "#apk"
},
{
"type": "Hashtag",
"href": "https://social.raytec.co/tags/android",
"name": "#android"
},
{
"type": "Hashtag",
"href": "https://social.raytec.co/tags/Chrome",
"name": "#Chrome"
},
{
"type": "Hashtag",
"href": "https://social.raytec.co/tags/cybersecurity",
"name": "#cybersecurity"
},
{
"type": "Hashtag",
"href": "https://social.raytec.co/tags/dos",
"name": "#dos"
},
{
"type": "Hashtag",
"href": "https://social.raytec.co/tags/endpoint",
"name": "#endpoint"
},
{
"type": "Hashtag",
"href": "https://social.raytec.co/tags/google",
"name": "#google"
},
{
"type": "Hashtag",
"href": "https://social.raytec.co/tags/googleplay",
"name": "#googleplay"
},
{
"type": "Hashtag",
"href": "https://social.raytec.co/tags/infosec",
"name": "#infosec"
},
{
"type": "Hashtag",
"href": "https://social.raytec.co/tags/malware",
"name": "#malware"
},
{
"type": "Hashtag",
"href": "https://social.raytec.co/tags/otx",
"name": "#otx"
},
{
"type": "Hashtag",
"href": "https://social.raytec.co/tags/openthreatexchange",
"name": "#openthreatexchange"
},
{
"type": "Hashtag",
"href": "https://social.raytec.co/tags/rat",
"name": "#rat"
},
{
"type": "Hashtag",
"href": "https://social.raytec.co/tags/remoteaccesstrojan",
"name": "#remoteaccesstrojan"
},
{
"type": "Hashtag",
"href": "https://social.raytec.co/tags/sms",
"name": "#sms"
},
{
"type": "Hashtag",
"href": "https://social.raytec.co/tags/spynote",
"name": "#spynote"
},
{
"type": "Hashtag",
"href": "https://social.raytec.co/tags/trojan",
"name": "#trojan"
},
{
"type": "Hashtag",
"href": "https://social.raytec.co/tags/bot",
"name": "#bot"
},
{
"type": "Hashtag",
"href": "https://social.raytec.co/tags/alienvault",
"name": "#alienvault"
}
],
"replies": {
"id": "https://social.raytec.co/users/techbot/statuses/114347896006496381/replies",
"type": "Collection",
"first": {
"type": "CollectionPage",
"next": "https://social.raytec.co/users/techbot/statuses/114347896006496381/replies?only_other_accounts=true&page=true",
"partOf": "https://social.raytec.co/users/techbot/statuses/114347896006496381/replies",
"items": []
}
},
"likes": {
"id": "https://social.raytec.co/users/techbot/statuses/114347896006496381/likes",
"type": "Collection",
"totalItems": 0
},
"shares": {
"id": "https://social.raytec.co/users/techbot/statuses/114347896006496381/shares",
"type": "Collection",
"totalItems": 1
}
}