___          _____  _____    __  ____  ____       _ 
  / _ \        / ____||_   _|  / _||___ \|___ \     | |
 | | | |__  __| (___    | |   | |_   __) | __) |  __| |
 | | | |\ \/ / \___ \   | |   |  _| |__ < |__ <  / _` |
 | |_| | >  <  ____) | _| |_  | |   ___) |___) || (_| |
  \___/ /_/\_\|_____/ |_____| |_|  |____/|____/  \__,_|
                          ______                       
                         |______|                      

$:> Add a new phishing / malware campaign into 0xSI_f33d
$:>  <  The Portuguese Abuse Open Feed >
$:> by seguranca-informatica.pt
$:>
$:> help
$:> This feed compiles phishing and malware campaigns targeting only Portuguese citizens
$:> su root
$root:> Use the hashtag: #0xSI_f33d

Friends of 0xSI_F33d

$:> These organizations use data submitted to and verified by 0xSI_f33d.

---

Are you using 0xSI_f33d data, but not listed here?
Let us know so we can share the good news with the 0xSI_f33d community.

Infographic: Threat Report Portugal Q3 2020

$:> Visit the publication here.

$:> history | grep "infographic"
-Q1 2020 Infographic
-Q2 2020 Infographic
-Q3 2020 Infographic

$:> Download the printable version: PDF or PNG
$:> Thanks, by root

API documentation

API is available at https://feed.seguranca-informatica.pt/api.php and will return a CSV or JSON response.
API is free but account creation is required. After that, the API token will be sent to your email.
Please note that running a massive amount of queries in a short time will get you blocked and/or banned.

$:> If you need a API token, please contact us here.

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

By default, only last year submitions are returned. Examples on how to use the API can be found below.

$:> Parameters highlighted with red color are mandatory.

Example	Key | Value
from	feed.seguranca-informatica.pt/api.php?token_u=#&token_p=#&from=today possible values: {today;yesterday;last-3-days;last-week;last-month;last-6-months;last-year}
format	feed.seguranca-informatica.pt/api.php?token_u=#&token_p=#&from=today&format=csv feed.seguranca-informatica.pt/api.php?token_u=#&token_p=#&from=today&format=raw possible values: {csv;json;raw}
tag	feed.seguranca-informatica.pt/api.php?token_u=#&token_p=#&from=today&format=json&tag=malware possible values: only the available 0xSI_f33d tags
title_or_url	feed.seguranca-informatica.pt/api.php?token_u=#&token_p=#&from=today&format=json&tag=malware&title_or_url=amazon example 1: feed.seguranca-informatica.pt/api.php?token_u=#&token_p=#&from=today&format=json&title_or_url=banco example 2: feed.seguranca-informatica.pt/api.php?token_u=#&token_p=#&from=last-year&format=csv&title_or_url=.pt example 3: feed.seguranca-informatica.pt/api.php?token_u=#&token_p=#&from=last-year&format=csv&title_or_url=.pt&tag=phishing

Returned list example: {id,url,domain,data,ip,mx,cname,vt_url,img_url,id_user,id_tag,info}

For integration with security appliances, firewalls or spam engines, we recommend using the raw format:

$:> feed.seguranca-informatica.pt/api.php?token_u=#&token_p=#&from=today&format=raw (get domain by line)

$:> Get in touch, or swing by for a cup of coffee.

:$> Found a phishing website? See if it's in the 0xSI_f33d ;)

Date	URL	Category	Tag	Virus Total	Submited by
2021-02-25	https://ia601509.us.archive.org/26/items/index_20210221_1922/index.h... [ ]	phishing	phishing		anonymous
2021-02-25	https://icas-bisaro.utad.pt/wp-includes/Requests/Utility/empresa/mob... [ ]	phishing	phishing		0x_bot-si_f33d
2021-02-25	https://kyklos-it.com/wp-admin/js/--/https:/edp.pt/Particulares/?cli... [ ]	phishing	EDP		anonymous
2021-02-24	https://maputogal.com/rh3mu8.rar [ ]	malware	malware		0x_bot-si_f33d
2021-02-24	http://termofilmpeliculas.pt/ovh/mail.ovh.co.ukV3/W/ [ ]	phishing	phishing		0x_bot-si_f33d
2021-02-24	http://termofilmpeliculas.pt/ovh/mail.ovh.co.ukV3/W [ ]	phishing	phishing		0x_bot-si_f33d
2021-02-24	http://carzone.deve.pt/s3zpciz99.rar [ ]	malware	malware		0x_bot-si_f33d
2021-02-24	http://trypar.deve.pt/cd2vg1b.zip [ ]	malware	malware		0x_bot-si_f33d
2021-02-24	https://hopelessversed.com/ [ ]	phishing	MB WAY		anonymous
2021-02-24	http://5.206.227.104/mofile.exe [ ]	malware	malware		0x_bot-si_f33d
2021-02-24	https://vegasvirtualagent.com/mb-mobile.pt/F004f19441/22788001c.php?... [ ]	phishing	MB WAY		anonymous
2021-02-24	https://be-fit.pt/befit/wp-admin/maint/-- [ ]	phishing	phishing		0x_bot-si_f33d
2021-02-24	https://olx.pl-portal.cam/ssl/millenium.php [ ]	phishing	banking		0x_bot-si_f33d
2021-02-24	https://woodchatmolly.com/kpTdjytI.php?65weq4f564f564qf321ff654wfewf...	phishing	bpi		@sirpedrotavares
2021-02-24	https://woodchatmolly.com/kpTdjytI.php?65weq4f564f564qf321ff654wfewf...	phishing	bpi		@sirpedrotavares
2021-02-23	http://jealouspassage.com/kpTdjytI.php?65weq4fe564fw321fw564fw5f64wq... [ ]	phishing	bpi		anonymous
2021-02-23	continentebomdia.com [ ]	phishing	phishing		0x_bot-si_f33d
2021-02-23	https://gtc-pt.com/cgbin [ ]	phishing	phishing		0x_bot-si_f33d
2021-02-23	https://cefalife.com/MBwey [ ]	phishing	MB WAY		anonymous
2021-02-23	https://sleee21.utad.pt/wp-content/plugins/yxloias/gejjds/grant/Gran... [ ]	phishing	phishing		0x_bot-si_f33d
2021-02-23	http://pt-olx.me/ [ ]	phishing	phishing		0x_bot-si_f33d
2021-02-22	http://epalvito.com/ds/2202.gif [ ]	phishing	phishing		0x_bot-si_f33d
2021-02-22	http://epalvito.com/ds/2102.gif [ ]	phishing	phishing		0x_bot-si_f33d
2021-02-22	http://188.251.74.46:1161/Mozi.m [ ]	malware	Satori/Mirai		0x_bot-si_f33d
2021-02-22	https://olx.pt-id562089.site/cash59992972 [ ]	phishing	phishing		anonymous
2021-02-21	novo-cliente-santander.online [ ]	phishing	santander		0x_bot-si_f33d
2021-02-21	credita-agricola.com	phishing	caixa-agricola		0x_bot-si_f33d
2021-02-21	https://manuelcostamelo.pt/components/com_content/views/archive/tmpl... [ ]	phishing	phishing		0x_bot-si_f33d
2021-02-20	https://miraclemoor.eu/wp-admin/css/--/https:/www.ansr.pt/?cliente=x... [ ]	phishing	phishing		anonymous
2021-02-19	https://track.link-hit.info/click	phishing	phishing		@sirpedrotavares
2021-02-19	https://tracking.correctionsystem.win/pt/entregafex/ [ ]	phishing	phishing		anonymous
2021-02-19	bpi-banking.net [ ]	phishing	bpi		0x_bot-si_f33d
2021-02-19	netbancoempresa.online [ ]	phishing	santander		0x_bot-si_f33d
2021-02-19	cibancoinforma.online [ ]	phishing	santander		0x_bot-si_f33d
2021-02-18	https://mail.phosphorland.pt/apd9tn.tar [ ]	malware	malware		0x_bot-si_f33d
2021-02-18	http://5.206.227.101/private/slim.exe [ ]	malware	malware		0x_bot-si_f33d
2021-02-17	http://olx-pt.pays-access.com/ [ ]	phishing	phishing		0x_bot-si_f33d
2021-02-17	ctt-post-portugal.com [ ]	phishing	CTT		0x_bot-si_f33d
2021-02-17	redis-cttpost.com [ ]	phishing	CTT		0x_bot-si_f33d
2021-02-17	http://facebook.mystand.pt/ubz24w61.rar [ ]	malware	malware		0x_bot-si_f33d
2021-02-17	https://shipprime.sendtocollectionpoint.win/pt/ips/?p=175&cep=HyYWPz... [ ]	phishing	phishing		anonymous
2021-02-16	http://192.95.2.164 [ ]	malware	URSA/mispadu		anonymous
2021-02-16	http://144.217.17.185/ [ ]	malware	URSA/mispadu		anonymous
2021-02-16	http://185.150.117.93 [ ]	malware	URSA/mispadu		anonymous
2021-02-16	https://weizink.com/d0a6eff58d3ba8c480a081b20088e1d7/ [ ]	phishing	banking		anonymous
2021-02-16	http://jimdog2.cloudaccess.host/templates/beez3/Alerte [ ]	phishing	MB WAY		anonymous
2021-02-16	millenniumbcp-cancelar.com	phishing	millennium		0x_bot-si_f33d
2021-02-16	millenniumbcp-pt-alerta.com [ ]	phishing	millennium		0x_bot-si_f33d
2021-02-16	http://www.guardarunners.pt/wp-content/Host_IkaBCwUo229.bin [ ]	malware	malware		0x_bot-si_f33d
2021-02-16	https://closeneighborhood.com/ [ ]	phishing	MB WAY		anonymous
2021-02-15	pt-id562089.site [ ]	phishing	phishing		0x_bot-si_f33d
2021-02-15	ideapt-arrendar-casas876000mapapt.xyz [ ]	phishing	phishing		0x_bot-si_f33d
2021-02-15	bpinetpt.com	phishing	bpi		0x_bot-si_f33d
2021-02-14	ideptcasasportugal-01293771.icu [ ]	phishing	phishing		0x_bot-si_f33d
2021-02-14	pt-totta.com [ ]	phishing	santander		0x_bot-si_f33d
2021-02-13	https://mbway-desbloquear.id-392.com [ ]	phishing	MB WAY		anonymous
2021-02-13	http://85.241.39.182:40587/i [ ]	malware	Satori/Mirai		0x_bot-si_f33d
2021-02-11	http://autorpauloschmidt.com/s260xm.tar [ ]	malware	malware		0x_bot-si_f33d
2021-02-11	https://autorpauloschmidt.com/s260xm.tar [ ]	malware	malware		0x_bot-si_f33d
2021-02-11	http://millennium-bcp-alerta.com [ ]	phishing	millennium		anonymous
2021-02-10	https://storage.googleapis.com/mystorage2021/P-2-19.dll	malware	Lampion		@sirpedrotavares
2021-02-10	https://storage.googleapis.com/mystorage2021/0.zip	malware	Lampion		@sirpedrotavares
2021-02-10	http://5.188.9.28	malware	Lampion		anonymous
2021-02-10	http://5.188.9.28/	phishing	banking		@sirpedrotavares
2021-02-10	millennium-bcp-alerta.com [ ]	phishing	millennium		0x_bot-si_f33d
2021-02-10	millenniumbcp-alerta-pt.com [ ]	phishing	millennium		0x_bot-si_f33d
2021-02-10	https://www.webuzz.com.pt/office/dhl_top/cmd-login=7152cc9e332ccb53d... [ ]	phishing	phishing		0x_bot-si_f33d
2021-02-09	bpi-portugal.com [ ]	phishing	bpi		0x_bot-si_f33d
2021-02-09	millennium-bcp.link [ ]	phishing	millennium		0x_bot-si_f33d
2021-02-09	https://comprovativo-millenniumbcp.nettweb5.com [ ]	phishing	millennium		anonymous
2021-02-09	https://farrishustlez.com/pkerkmt3.php?65w4eqf654ef321ef546fewqfwffh... [ ]	phishing	bpi		anonymous
2021-02-09	http://mbway.id-27002.com [ ]	phishing	MB WAY		anonymous
2021-02-09	https://dao.international/wp-admin/--/https:/ind.millenniumbcp.pt/Pa... [ ]	phishing	millennium		@sirpedrotavares
2021-02-09	https://ads-bcp.com/site/choose.php [ ]	phishing	millennium		@sirpedrotavares
2021-02-09	https://protezionesalute.it/wp-admin/css/https:/www.bancobpi.pt/Part... [ ]	phishing	bpi		@sirpedrotavares
2021-02-09	https://pantrykitchen.co.za/wp-admin/css/--/https:/www.creditoagrico... [ ]	phishing	caixa-agricola		@sirpedrotavares
2021-02-08	millenniumbcp-alert.com [ ]	phishing	millennium		0x_bot-si_f33d
2021-02-08	http://188.251.71.208:2919/Mozi.m [ ]	malware	Satori/Mirai		0x_bot-si_f33d
2021-02-08	https://wizink-online-cartao.com/PT820119576/8ed1fe57d1ecedfeae3a97b... [ ]	phishing	phishing		anonymous
2021-02-06	idealistapt-apartamento0129-casas012931.xyz [ ]	phishing	phishing		0x_bot-si_f33d
2021-02-04	https://dobuy-online.com/M-B-Way [ ]	phishing	MB WAY		anonymous
2021-02-04	wizink-clientes-netbanco-particulares.com [ ]	phishing	banking		0x_bot-si_f33d
2021-02-04	https://wizink-particulares-cartao.com/PT834750338 [ ]	phishing	phishing		anonymous
2021-02-04	https://ads-credit.com/choose.php [ ]	phishing	caixa-agricola		anonymous
2021-02-03	idealistapt-info231protecao-012911apartamento1.xyz [ ]	phishing	phishing		0x_bot-si_f33d
2021-02-03	http://alnujaifi-portal.com/ds/3101.gif [ ]	malware	malware		0x_bot-si_f33d
2021-02-01	https://heberhalf.com/wp-content/plugins/imsanity/libs/jss/ [ ]	phishing	CTT		anonymous
2021-02-01	grupo-santander.com [ ]	phishing	santander		0x_bot-si_f33d
2021-01-31	idealistapt-casas183113-avisoinfo10318.xyz	phishing	phishing		0x_bot-si_f33d
2021-01-30	https://yenisenelcorap.com/wp-chnfes.html [ ]	phishing	phishing		anonymous
2021-01-30	http://85.241.39.182:33252/i	malware	Satori/Mirai		0x_bot-si_f33d
2021-01-28	https://lesggespouly.com/7mkCTmOP.php [ ]	phishing	bpi		anonymous
2021-01-28	https://yofricana.com/wp-admin/js/https:/www.creditoagricola.pt/ [ ]	phishing	caixa-agricola		anonymous
2021-01-28	https://spinshipments.com/cc/pt/?dom=transferclicks.com&cep=s7Fx19_5... [ ]	phishing	CTT		anonymous
2021-01-28	evs-ctt-post-pt.net [ ]	phishing	CTT		0x_bot-si_f33d
2021-01-28	evs-ctt-post-pt.net [ ]	phishing	CTT		0x_bot-si_f33d
2021-01-28	https://electronic-messagecom.com:443/28012021/ [ ]	malware	banking		anonymous
2021-01-27	https://azoresalive.com/wea92k.rar [ ]	malware	Ursnif		0x_bot-si_f33d
2021-01-27	http://85.240.220.211:1363/Mozi.m [ ]	malware	Satori/Mirai		0x_bot-si_f33d
2021-01-27	worten.club [ ]	phishing	Worten		0x_bot-si_f33d
2021-01-27	http://admin.ffauto.pt/ew4bx7fpy.rar [ ]	malware	malware		0x_bot-si_f33d
2021-01-27	https://stainedjabot.com/wp-includes/iryR9fdy.php?56we4qf654f65fq321... [ ]	phishing	bpi		anonymous
2021-01-27	http://admin.jpcar.mystand.pt/occb6nxz4.rar [ ]	malware	malware		0x_bot-si_f33d

$:> history -- (Only the last 30 days are presented here. For more details and IoCs please use the search field or the 0xSI_f33d API) --