___          _____  _____    __  ____  ____       _ 
  / _ \        / ____||_   _|  / _||___ \|___ \     | |
 | | | |__  __| (___    | |   | |_   __) | __) |  __| |
 | | | |\ \/ / \___ \   | |   |  _| |__ < |__ <  / _` |
 | |_| | >  <  ____) | _| |_  | |   ___) |___) || (_| |
  \___/ /_/\_\|_____/ |_____| |_|  |____/|____/  \__,_|
                          ______                       
                         |______|                      

$:> Add a new phishing / malware campaign into 0xSI_f33d
$:>  <  The Portuguese Abuse Open Feed >
$:> by seguranca-informatica.pt
$:>
$:> help
$:> This feed compiles phishing and malware campaigns targeting only Portuguese citizens
$:> su root
$root:> Use the hashtag: #0xSI_f33d
$root:> @ VirusTotal official ingestor

Friends of 0xSI_F33d

$:> These organizations use data submitted to and verified by 0xSI_f33d.

---

Are you using 0xSI_f33d data, but not listed here?
Let us know so we can share the good news with the 0xSI_f33d community.

Infographic: Threat Report Portugal Q3&Q4 2022

$:> Visit the publication here.

$:> history | grep "infographic"
-Q2 2022 Infographic
-Q1 2022 Infographic
-Q4 2021 Infographic
-Q3 2021 Infographic
-Q2 2021 Infographic
-Q1 2021 Infographic
-Q4 2020 Infographic
-Q3 2020 Infographic
-Q2 2020 Infographic
-Q1 2020 Infographic

$:> Download the printable version: PDF or PNG
$:> Thanks, by root

API documentation

API is available at https://feed.seguranca-informatica.pt/api.php and will return a CSV or JSON response.
The API is free for 7 days and account creation is required. After that, the API token will be sent to your email.
You can also donate and join our membership plan for unlimited monthly/yearly access.



Please note that running a massive amount of queries in a short time will get you blocked and/or banned.

$:> If you need a API token, please contact us here.

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

By default, only last year submitions are returned. Examples on how to use the API can be found below.

$:> Parameters highlighted with red color are mandatory.

Example	Key | Value
from	feed.seguranca-informatica.pt/api.php?token_u=#&token_p=#&from=today possible values: {today;yesterday;last-3-days;last-week;last-month;last-6-months;last-year}
format	feed.seguranca-informatica.pt/api.php?token_u=#&token_p=#&from=today&format=csv feed.seguranca-informatica.pt/api.php?token_u=#&token_p=#&from=today&format=raw possible values: {csv;json;raw}
tag	feed.seguranca-informatica.pt/api.php?token_u=#&token_p=#&from=today&format=json&tag=malware possible values: only the available 0xSI_f33d tags
title_or_url	feed.seguranca-informatica.pt/api.php?token_u=#&token_p=#&from=today&format=json&tag=malware&title_or_url=amazon example 1: feed.seguranca-informatica.pt/api.php?token_u=#&token_p=#&from=today&format=json&title_or_url=banco example 2: feed.seguranca-informatica.pt/api.php?token_u=#&token_p=#&from=last-year&format=csv&title_or_url=.pt example 3: feed.seguranca-informatica.pt/api.php?token_u=#&token_p=#&from=last-year&format=csv&title_or_url=.pt&tag=phishing

Returned list example: {id,url,domain,data,ip,mx,cname,vt_url,img_url,id_user,id_tag,info}

For integration with security appliances, firewalls or spam engines, we recommend using the raw format:

$:> feed.seguranca-informatica.pt/api.php?token_u=#&token_p=#&from=today&format=raw (get domain by line)

$:> Get in touch, or swing by for a cup of coffee.

:$> Found a phishing website? See if it's in the 0xSI_f33d ;)

Date	URL	Category	Tag	Virus Total	Submited by
2025-03-24	https://appnee.com/tag/kmsauto/ [ ]	phishing	phishing		anonymous
2025-03-24	https://via-alverd.web.app/ [ ]	phishing	phishing		anonymous
2025-03-24	https://www.dotwebby.com/penalty/wp-content/upgrade/index/Accele/gov... [ ]	phishing	phishing		anonymous
2025-03-24	https://www.dotwebby.com/penalty/wp-content/upgrade/index/Accele/gov... [ ]	phishing	phishing		anonymous
2025-03-21	http://suportecaixadirectapt.com/login/login.php [ ]	phishing	phishing		0x_bot-si_f33d
2025-03-21	http://www.vintevintechocolate.pt/kaka/ [ ]	phishing	phishing		0x_bot-si_f33d
2025-03-21	https://caixadirectalive.com [ ]	phishing	cgd		anonymous
2025-03-21	https://www.nkpsci.ac.th/wp-content/plugins/elementor/core/common/mo... [ ]	phishing	phishing		anonymous
2025-03-21	https://cttexpresso-pagamentos.com/ [ ]	phishing	CTT		anonymous
2025-03-21	http://cgd-redirecionar.com/ [ ]	phishing	cgd		anonymous

$:> history -- (Only the last 10 submissions are presented here. For more details and IoCs please use the search field or the 0xSI_f33d API) --