URLhaus Database

You are currently viewing the URLhaus database entry for https://codeload.github.com/citraadvertising/X/zip/refs/heads/main which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:3505242
URL: https://codeload.github.com/citraadvertising/X/zip/refs/heads/main
URL Status:Offline
Host: codeload.github.com
Date added:2025-04-09 08:08:05 UTC
Last online:2025-05-14 23:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: JAMESWT_WT
Abuse complaint sent (?): Yes (2025-04-09 08:47:06 UTC to noc{at}github[dot]com)
Takedown time:1 month, 27 days, 6 hours, 32 minutes Bad (down since 2025-06-05 14:41:20 UTC)

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-05-10X-main.zipzip db4aa2c4a1cc95a90de2ab7106ba4f91e798e4b39eaa0a708dac6f9e9cda8932n/a 
2025-05-10X-main.zipzip 96cce4e955d6332da252494e4abf446de3150c83cc41ea510f4e93f6459b1e1an/a 
2025-05-10X-main.zipzip a270d5cd8411fcc704366652658a04534a755eaa205355af186b6933b9f8c5can/a 
2025-04-15X-main.zipzip 22f90dbb39f0c98c9a210e63f1bf6c651ab08ce35acee675c9ee648dd5a07e85n/a 
2025-04-09X-main.zipzip f8e4cbd1a20eda495f4ce256439c3bf74ad04a2ff7467c2b0c3b7fce765bc554n/a