___          _____  _____    __  ____  ____       _ 
  / _ \        / ____||_   _|  / _||___ \|___ \     | |
 | | | |__  __| (___    | |   | |_   __) | __) |  __| |
 | | | |\ \/ / \___ \   | |   |  _| |__ < |__ <  / _` |
 | |_| | >  <  ____) | _| |_  | |   ___) |___) || (_| |
  \___/ /_/\_\|_____/ |_____| |_|  |____/|____/  \__,_|
                          ______                       
                         |______|                      

$:> Add a new phishing / malware campaign into 0xSI_f33d
$:>  <  The Portuguese Abuse Open Feed >
$:> by seguranca-informatica.pt
$:>
$:> help
$:> This feed compiles phishing and malware campaigns targeting only Portuguese citizens
$:> su root
$root:> Use the hashtag: #0xSI_f33d
$root:> @ VirusTotal official ingestor

Friends of 0xSI_F33d

$:> These organizations use data submitted to and verified by 0xSI_f33d.

---

Are you using 0xSI_f33d data, but not listed here?
Let us know so we can share the good news with the 0xSI_f33d community.

Infographic: Threat Report Portugal Q2 2021

$:> Visit the publication here.

$:> history | grep "infographic"
-Q1 2021 Infographic
-Q4 2020 Infographic
-Q3 2020 Infographic
-Q2 2020 Infographic
-Q1 2020 Infographic

$:> Download the printable version: PDF or PNG
$:> Thanks, by root

API documentation

API is available at https://feed.seguranca-informatica.pt/api.php and will return a CSV or JSON response.
API is free but account creation is required. After that, the API token will be sent to your email.
Please note that running a massive amount of queries in a short time will get you blocked and/or banned.

$:> If you need a API token, please contact us here.

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

By default, only last year submitions are returned. Examples on how to use the API can be found below.

$:> Parameters highlighted with red color are mandatory.

Example	Key | Value
from	feed.seguranca-informatica.pt/api.php?token_u=#&token_p=#&from=today possible values: {today;yesterday;last-3-days;last-week;last-month;last-6-months;last-year}
format	feed.seguranca-informatica.pt/api.php?token_u=#&token_p=#&from=today&format=csv feed.seguranca-informatica.pt/api.php?token_u=#&token_p=#&from=today&format=raw possible values: {csv;json;raw}
tag	feed.seguranca-informatica.pt/api.php?token_u=#&token_p=#&from=today&format=json&tag=malware possible values: only the available 0xSI_f33d tags
title_or_url	feed.seguranca-informatica.pt/api.php?token_u=#&token_p=#&from=today&format=json&tag=malware&title_or_url=amazon example 1: feed.seguranca-informatica.pt/api.php?token_u=#&token_p=#&from=today&format=json&title_or_url=banco example 2: feed.seguranca-informatica.pt/api.php?token_u=#&token_p=#&from=last-year&format=csv&title_or_url=.pt example 3: feed.seguranca-informatica.pt/api.php?token_u=#&token_p=#&from=last-year&format=csv&title_or_url=.pt&tag=phishing

Returned list example: {id,url,domain,data,ip,mx,cname,vt_url,img_url,id_user,id_tag,info}

For integration with security appliances, firewalls or spam engines, we recommend using the raw format:

$:> feed.seguranca-informatica.pt/api.php?token_u=#&token_p=#&from=today&format=raw (get domain by line)

$:> Get in touch, or swing by for a cup of coffee.

:$> Found a phishing website? See if it's in the 0xSI_f33d ;)

Date	URL	Category	Tag	Virus Total	Submited by
2021-10-22	https://gale.pt/m/?redacted [ ]	phishing	phishing		0x_bot-si_f33d
2021-10-21	montepio-app.com [ ]	phishing	montepio		0x_bot-si_f33d
2021-10-21	https://gebox.es/CTT/Checkout/portal/parcel-General-delivery_reefeer... [ ]	phishing	phishing		anonymous
2021-10-21	http://arrigonegocios.com/ctt [ ]	phishing	CTT		anonymous
2021-10-20	novobanco-app.com [ ]	phishing	novobanco		0x_bot-si_f33d
2021-10-20	https://megasolucoes.pt/fugiatquas/documents.zip [ ]	malware	malware		0x_bot-si_f33d
2021-10-20	http://net24online.pl/autoryzacja/mobile/ [ ]	phishing	phishing		0x_bot-si_f33d
2021-10-20	https://app-novobanco.com [ ]	phishing	phishing		anonymous
2021-10-19	https://edifup.pt/natusaccusantium/documents.zip [ ]	malware	malware		0x_bot-si_f33d
2021-10-19	entrega-cttexpress-movel.com	phishing	CTT		0x_bot-si_f33d
2021-10-19	entrega-cttexpress-online.com	phishing	CTT		0x_bot-si_f33d
2021-10-19	https://modulosegurobradesconet.com/ [ ]	phishing	banking		0x_bot-si_f33d
2021-10-19	http://appsmsatendimento.com/ [ ]	phishing	banking		0x_bot-si_f33d
2021-10-19	http://www.atendimentocef.cf/ [ ]	phishing	banking		0x_bot-si_f33d
2021-10-18	http://compatiblebelieve.top/continente/tb.php?_t=163455860116345594... [ ]	phishing	phishing		anonymous
2021-10-18	http://mail.amvr.site/baixar/171121.html [ ]	phishing	meo		anonymous
2021-10-18	http://141.118.125.34.bc.googleusercontent.com/caixa/appWeb/desktop/... [ ]	phishing	banking		0x_bot-si_f33d
2021-10-17	http://caixa.atendimento.ativarseuapelido.link/sinbc/nb/login/login....	phishing	banking		0x_bot-si_f33d
2021-10-17	montepio24.net [ ]	phishing	montepio		0x_bot-si_f33d
2021-10-16	https://tudineroalinstantebcp.com/ [ ]	phishing	banking		0x_bot-si_f33d
2021-10-16	montepio24.org [ ]	phishing	montepio		0x_bot-si_f33d
2021-10-16	http://144.64.234.103:57310/Mozi.m	malware	malware		0x_bot-si_f33d
2021-10-16	https://plenia.pt/unbearable.php [ ]	malware	malware		0x_bot-si_f33d
2021-10-16	https://totebagcanvas.com/wp-content/maintenance/--/https:/www.novob... [ ]	phishing	novobanco		anonymous
2021-10-16	http://promosms.me/lp51/96*******/Vale_Gasolina [ ]	phishing	phishing		anonymous
2021-10-15	https://mestergoodjubiesfrn5.blogspot.com/ [ ]	phishing	CTT		anonymous
2021-10-15	https://maloubalouma.com/pt/Codigo_de_envio	phishing	CTT		@sirpedrotavares
2021-10-15	https://grupounited.pt/possimusnon/maximeporro-143278522 [ ]	phishing	phishing		0x_bot-si_f33d
2021-10-15	http://85.247.125.87:60308/i [ ]	malware	malware		0x_bot-si_f33d
2021-10-15	mbway-portugal.xyz [ ]	phishing	MB WAY		0x_bot-si_f33d
2021-10-15	http://176.79.45.83:55929/Mozi.a	malware	malware		0x_bot-si_f33d
2021-10-15	https://vamosacabarcomasolidaoeisolamento.pt/documentoo/traxx/ [ ]	phishing	phishing		0x_bot-si_f33d
2021-10-14	http://85.247.125.87:17174/i [ ]	malware	malware		0x_bot-si_f33d
2021-10-14	http://5.206.227.77/mipsel [ ]	malware	malware		0x_bot-si_f33d
2021-10-14	http://5.206.227.77/armv4l	malware	malware		0x_bot-si_f33d
2021-10-14	ind-millenniumbcp.com [ ]	phishing	millennium		0x_bot-si_f33d
2021-10-14	moduloprotetivosantander.live [ ]	phishing	santander		0x_bot-si_f33d
2021-10-14	moduloprotetivosantander.com [ ]	phishing	santander		0x_bot-si_f33d
2021-10-14	alerta-movil-bbva.com	phishing	phishing		0x_bot-si_f33d
2021-10-14	alertas-movil-bbva.com	phishing	phishing		0x_bot-si_f33d
2021-10-14	dispositivo-alerta.com [ ]	phishing	phishing		0x_bot-si_f33d
2021-10-14	bbva-portal.site	phishing	banking		0x_bot-si_f33d
2021-10-14	atendimento2021.cloud [ ]	phishing	phishing		0x_bot-si_f33d
2021-10-14	atendimento2021.email [ ]	phishing	phishing		0x_bot-si_f33d
2021-10-14	http://f6d03e45.carpoint.pt/fr [ ]	phishing	phishing		0x_bot-si_f33d
2021-10-14	http://85.247.125.87:17174/mozi.m [ ]	malware	malware		0x_bot-si_f33d
2021-10-13	http://141.118.125.34.bc.googleusercontent.com/caixa/appWeb/desktop/... [ ]	phishing	banking		0x_bot-si_f33d
2021-10-13	http://91.214.124.225/dl/santander/dl/download9.php [ ]	malware	banking		0x_bot-si_f33d
2021-10-13	http://85.247.125.87:60308/Mozi.m [ ]	malware	malware		0x_bot-si_f33d
2021-10-13	https://swisspost.editorafiel.pt/K [ ]	phishing	phishing		0x_bot-si_f33d
2021-10-13	http://login.ovh.comdesogipe.frdd.padariamorgado.pt/[email protected]	phishing	phishing		0x_bot-si_f33d
2021-10-13	http://www.haddontownespa.com/kickitoutbygreg/xgrehandrishen/hendrei... [ ]	phishing	phishing		0x_bot-si_f33d
2021-10-13	https://paiement-ovh-com-fbb74eb8.heldersa.pt/Z203QjdaaG9DMjNXaVNaZ0... [ ]	phishing	phishing		0x_bot-si_f33d
2021-10-13	https://waszapaczka.eu/ReCleP8zqJCCPqDw/z7JdsdqOX8Dq8opsuJ-millenniu... [ ]	phishing	millennium		0x_bot-si_f33d
2021-10-12	https://paiement-ovh-com-fbb74eb8.heldersa.pt/Z203QjdaaG9DMjNXaVNaZ0... [ ]	phishing	phishing		0x_bot-si_f33d
2021-10-12	https://vacanciespk.com/wp-admin/css/colors/light/?hash=Y2FybG9zLnNp... [ ]	phishing	novobanco		anonymous
2021-10-12	https://novobanco-cashadvanced.bwnetworkus.com [ ]	phishing	novobanco		anonymous
2021-10-12	https://btcdonatver.site [ ]	phishing	phishing		anonymous
2021-10-12	net12empresatendimentol.online	phishing	banking		0x_bot-si_f33d
2021-10-12	segurancaitau.online	phishing	banking		0x_bot-si_f33d
2021-10-12	http://85.247.67.171:29286/.i [ ]	malware	malware		0x_bot-si_f33d
2021-10-12	http://31.22.199.162:3573/.i	malware	malware		0x_bot-si_f33d
2021-10-12	http://santander.net-2021.support/	phishing	santander		0x_bot-si_f33d
2021-10-11	https://upgrade-25gb-email.bristolschool.pt/ [ ]	phishing	phishing		0x_bot-si_f33d
2021-10-11	http://caixaeletronicax.blogspot.com/ [ ]	phishing	banking		0x_bot-si_f33d
2021-10-11	https://modulodeseguranca.cf/home.php [ ]	phishing	banking		0x_bot-si_f33d
2021-10-11	https://8bj.b97.myftpupload.com/caixa-client-support/home/ [ ]	phishing	banking		0x_bot-si_f33d
2021-10-11	http://94.132.183.84:49903/Mozi.m	malware	malware		0x_bot-si_f33d
2021-10-11	http://188.80.147.96:1035/bin.sh	malware	malware		0x_bot-si_f33d
2021-10-11	https://modulodeseguranca.cf/home.php [ ]	phishing	banking		0x_bot-si_f33d
2021-10-11	centralatendimentomed.online	phishing	phishing		0x_bot-si_f33d
2021-10-11	https://ricardopiresfotografia.com/RpuaNlWy/host.html [ ]	malware	malware		0x_bot-si_f33d
2021-10-11	http://opural.com/H2Wizms [ ]	phishing	phishing		anonymous
2021-10-11	https://cld.pt/dl/download/0bdd64a1-ed86-473a-95b6-cff1e06e0431/sapo... [ ]	malware	malware		anonymous
2021-10-11	http://opural.com [ ]	phishing	phishing		anonymous
2021-10-10	http://188.82.221.240:57891/Mozi.m	malware	malware		0x_bot-si_f33d
2021-10-10	net12atendimentosempresas.online	phishing	banking		0x_bot-si_f33d
2021-10-10	net2atendimentosempresas.online	phishing	banking		0x_bot-si_f33d
2021-10-10	love-portugal.site	phishing	phishing		0x_bot-si_f33d
2021-10-09	http://sejavisto.prp.pt/soap.php [ ]	malware	malware		0x_bot-si_f33d
2021-10-09	http://89.152.144.81:48285/.i [ ]	malware	malware		0x_bot-si_f33d
2021-10-09	http://144.64.234.103:57310/i	malware	malware		0x_bot-si_f33d
2021-10-09	http://188.251.82.254:4955/Mozi.m	malware	malware		0x_bot-si_f33d
2021-10-08	http://kutt.it/caixahomepage [ ]	phishing	banking		0x_bot-si_f33d
2021-10-08	https://clientealertabc.com/ [ ]	phishing	banking		0x_bot-si_f33d
2021-10-08	https://pichinchabanco.websites.co.in [ ]	phishing	phishing		0x_bot-si_f33d
2021-10-08	http://144.64.234.103:57310/bin.sh	malware	malware		0x_bot-si_f33d
2021-10-08	http://opural.com/IO5zWRB	phishing	phishing		anonymous
2021-10-08	caixacliente.info	phishing	banking		0x_bot-si_f33d
2021-10-08	alerta-dispostivo.info	phishing	phishing		0x_bot-si_f33d
2021-10-07	https://drive.google.com/file/d/1MsIJ1qoTbC8Q16h4dpgP0f22jKm6XdWQ/vi... [ ]	malware	malware		anonymous
2021-10-07	https://operacaocaixa.blob.core.windows.net/caixa/pingado.html [ ]	phishing	phishing		0x_bot-si_f33d
2021-10-07	https://www.appnovobanco.com/ [ ]	phishing	novobanco		anonymous
2021-10-07	https://autoq.in/voluptatem-nobis/documents.zip [ ]	malware	malware		0x_bot-si_f33d
2021-10-07	http://144.64.234.103:57310/Mozi.a	malware	malware		0x_bot-si_f33d
2021-10-07	http://melectronics.pt/admin/mod/SFEpress/New/login.php?l=_JeHFUq_VJ... [ ]	phishing	phishing		0x_bot-si_f33d
2021-10-07	https://noiselab.pt/youapp/ [ ]	phishing	phishing		0x_bot-si_f33d
2021-10-07	http://www.edg-eg.com/md/webmail-portal-RD337 [ ]	phishing	phishing		0x_bot-si_f33d
2021-10-07	http://elodomum.pt/js/101.exe [ ]	malware	malware		0x_bot-si_f33d
2021-10-06	adm-ctt-portugal1.com	phishing	CTT		0x_bot-si_f33d
2021-10-06	atendimentocaixa.org [ ]	phishing	banking		0x_bot-si_f33d
2021-10-06	trparticulare-ctt.com [ ]	phishing	CTT		0x_bot-si_f33d
2021-10-06	https://millennium.mybank.sbs [ ]	phishing	millennium		0x_bot-si_f33d
2021-10-06	http://seguro.instagramautenticacao.com/ [ ]	phishing	phishing		0x_bot-si_f33d
2021-10-06	https://btcdonatver.site/ [ ]	phishing	phishing		anonymous
2021-10-05	http://dreamhomebend.com/wp-admin/includes/--/https:/NbSmart/?client... [ ]	phishing	novobanco		anonymous
2021-10-05	ctt-pt.email [ ]	phishing	CTT		0x_bot-si_f33d
2021-10-05	atualizar-pt.email [ ]	phishing	phishing		0x_bot-si_f33d
2021-10-05	netbanco-pt.email [ ]	phishing	banking		0x_bot-si_f33d
2021-10-05	alerta-dispositvo.info [ ]	phishing	banking		0x_bot-si_f33d
2021-10-05	admin-ctt-pt.com [ ]	phishing	CTT		0x_bot-si_f33d
2021-10-05	https://www.houserstorescatoncat.pt/edsheeran/Photograph.mp3 [ ]	malware	malware		anonymous
2021-10-05	http://santander-clientarea.info	phishing	santander		0x_bot-si_f33d
2021-10-05	https://payment-script-report.s3.us-east-2.amazonaws.com/XLS126index... [ ]	phishing	Microsoft		0x_bot-si_f33d
2021-10-05	http://162.0.216.116/novobanco [ ]	phishing	novobanco		anonymous
2021-10-05	https://cutt.ly/sEKTMgV [ ]	phishing	novobanco		anonymous
2021-10-05	http://162.0.216.116/novobanco/app/?hash=16f2ea9367d1a5de3e4437ef073... [ ]	phishing	novobanco		anonymous
2021-10-04	https://segurosaguiar.uy/dolorem-deleniti/documents.zip [ ]	malware	malware		0x_bot-si_f33d
2021-10-04	santander-clients.online	phishing	santander		0x_bot-si_f33d
2021-10-04	http://www.pt632aa.cn/fWIZE0kL/dbs-wa/ [ ]	phishing	phishing		0x_bot-si_f33d
2021-10-03	caixabank-cliente.info [ ]	phishing	banking		0x_bot-si_f33d
2021-10-03	bancosantander.systems [ ]	phishing	santander		0x_bot-si_f33d
2021-10-03	cadastroonline.site [ ]	phishing	banking		0x_bot-si_f33d
2021-10-03	netbanco-pt.com	phishing	banking		0x_bot-si_f33d
2021-10-03	http://santanderclient.com/ [ ]	phishing	santander		0x_bot-si_f33d
2021-10-02	http://santander.net-manager.support/	phishing	santander		0x_bot-si_f33d
2021-10-02	https://plenia.pt/unbearable.php [ ]	malware	malware		0x_bot-si_f33d
2021-10-02	http://144.64.234.103:57310/Mozi.m	malware	malware		0x_bot-si_f33d
2021-10-02	santander-alerta.info	phishing	santander		0x_bot-si_f33d
2021-10-02	nov0banco.sbs	phishing	novobanco		0x_bot-si_f33d
2021-10-02	bbva-alerta.net	phishing	banking		0x_bot-si_f33d
2021-10-02	https://huikit.agard.com.sg/Es/caixa/particular/home/ [ ]	phishing	banking		0x_bot-si_f33d
2021-10-01	https://coolbuyph.com/webmail.pt.lu/pt.lu [ ]	phishing	phishing		0x_bot-si_f33d
2021-10-01	http://176.79.45.83:55929/Mozi.a	malware	malware		0x_bot-si_f33d
2021-10-01	http://mfk-cpm.com/cash.php?id=11866 [ ]	phishing	phishing		anonymous
2021-09-30	http://ctt-correiosentrega.sytes.net/	phishing	CTT		anonymous
2021-09-30	santadar-pt.com [ ]	phishing	santander		0x_bot-si_f33d
2021-09-30	https://appmercadopago.cf/mercadopago.com/codigo-sms2.php [ ]	phishing	banking		0x_bot-si_f33d
2021-09-30	http://85.247.125.87:17174/i [ ]	malware	malware		0x_bot-si_f33d
2021-09-30	https://youdrone.pt/BAN8474783KI48848A838/acceso-clientes/?6s2d-fmRY... [ ]	phishing	banking		0x_bot-si_f33d
2021-09-30	https://segfortecorretoradeseguros.com/kindex.php [ ]	phishing	phishing		0x_bot-si_f33d
2021-09-29	https://www.drmartensportugallisboa.com/ [ ]	phishing	phishing		0x_bot-si_f33d
2021-09-29	http://5.206.227.77/mipsel [ ]	malware	malware		0x_bot-si_f33d
2021-09-29	http://5.206.227.77/armv4l	malware	malware		0x_bot-si_f33d
2021-09-29	https://cadastroo-clientess.sytes.net/ [ ]	phishing	phishing		0x_bot-si_f33d
2021-09-29	http://109.51.166.231:25122/.i	malware	malware		0x_bot-si_f33d
2021-09-29	http://85.247.125.87:17174/mozi.m [ ]	malware	malware		0x_bot-si_f33d
2021-09-28	sapo-pt.com [ ]	phishing	phishing		0x_bot-si_f33d
2021-09-28	https://saloniranighady.com/Pt/Expresso/Codigo_de_envio=PT15****239-... [ ]	phishing	CTT		anonymous
2021-09-28	https://mesterdramaislandpcr3.blogspot.com/ [ ]	phishing	CTT		anonymous
2021-09-28	https://dpdpoland.pl/jLHQx6HIe8XTxFpD/VMiODAF1Cc0VvrET-millennium/lo... [ ]	phishing	millennium		0x_bot-si_f33d
2021-09-28	milenniiumbcp-online.com	phishing	millennium		0x_bot-si_f33d
2021-09-28	milleniumbcp-pt.com	phishing	millennium		0x_bot-si_f33d
2021-09-28	pt-millenlumbcp.com	phishing	millennium		0x_bot-si_f33d
2021-09-28	http://admin-hostpoint-ch-11770450.atsoclis.pt/R0dUL1VLZ2tSNWJGOXZKc... [ ]	phishing	phishing		0x_bot-si_f33d
2021-09-28	https://ssparceltt.techsupvv.xyz/pt/ipsv2/?p=195&cep=BaWSsbTOEDHD-a3... [ ]	phishing	phishing		anonymous
2021-09-28	https://www.www-interbank-pe.aulavirtual.click/bpi/logn.php [ ]	phishing	bpi		0x_bot-si_f33d
2021-09-28	https://www.google.com/webhp?hl=uk&sa=X&ved=0ahUKEwjA5qvwoJzzAhVZ_rs... [ ]	phishing	phishing		anonymous
2021-09-28	http://opural.com/COQNArp [ ]	phishing	phishing		anonymous
2021-09-28	https://arefol.xyz/0cPSdl9	phishing	phishing		@sirpedrotavares
2021-09-28	https://ssparceltt.techsupvv.xyz/ [ ]	phishing	phishing		anonymous
2021-09-28	https://cutt.ly/fEccSCx [ ]	phishing	novobanco		anonymous
2021-09-28	https://novo-nbnet.site/login?1 [ ]	phishing	novobanco		anonymous
2021-09-24	https://terpelsicumple.com/ [ ]	phishing	phishing		anonymous
2021-09-23	http://85.247.67.171:29286/.i [ ]	malware	malware		0x_bot-si_f33d
2021-09-23	http://31.22.199.162:3573/.i	malware	malware		0x_bot-si_f33d
2021-09-23	https://www.appcaixaassinatura.com/ [ ]	phishing	banking		0x_bot-si_f33d
2021-09-23	https://www.fotomotion.com.co/wp-content/languages/--/https:/www.nov... [ ]	phishing	novobanco		anonymous
2021-09-23	http://admin-h0stp0int-ch-4af378bd.show-on.pt/SnNteHpQSjM4NnFjREZHUV... [ ]	phishing	phishing		0x_bot-si_f33d
2021-09-23	https://nha12.samatcha.org/public/css/--/https:/www.novobanco.pt/?cl... [ ]	phishing	phishing		anonymous

$:> history -- (Only the last 30 days are presented here. For more details and IoCs please use the search field or the 0xSI_f33d API) --