This is not possible on iOS.
A device token is assigned to an installation of an app upon registering to receive push notifications. Push notifications are sent using these tokens as an identifier of the recipient. iOS will then deliver the notification to the app that was assigned that particular device token.
The only way to bypass this would be to do some low-level network interception using private APIs, which would most likely only give you an encrypted version of the APNS payload.
与恶龙缠斗过久,自身亦成为恶龙;凝视深渊过久,深渊将回以凝视…