Security Scan Report: mega.en.uptodown.com

Site favicon
Submitted: Jul 1, 2026, 9:34:25 AMCompleted: Jul 1, 2026, 9:50:28 AMpubliccompleted
Loading additional data...

Summary

This website contacted 4 IPs in 3 countries across 6 domains to perform 2 HTTP transactions. The main domain is mega.en.uptodown.com and was registered NaN years ago.

Submitted URL: https://mega.en.uptodown.com/android

The Cisco Umbrella rank of the primary domain is #88,468 of the top 1 million websites

AI Security Verdict

Safe Website

Confidence: 95%

1
Risk Score

Legitimate download page for the MEGA Android app with no malicious indicators.

Safety Factors
Well‑established domain with long registration history
No forms collecting credentials or payment data
No malicious network or IDS alerts
Meta tags reference a known brand (MEGA) on a reputable third‑party download site (Uptodown)
Domain age information unavailable

Details

Page Title

MEGA for Android - Download the APK from Uptodown

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

download file sharing

(71%)

Domain Information

You're looking at domain 'mega.en.uptodown.com' on the commercial generic top-level domain (.com) and includes subdomain 'mega.en'. The core label 'uptodown' covers 8 characters holding three vowels versus 5 consonants. Breaking it apart gives 3 words: up, to, down. Median word length is 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://mega.en.uptodown.com/android

Page Load Overview

5.73s
Total Load Time
116
HTTP Requests
17
Domains
746 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:7,972 chars
Detector Agreement:100%

Website Classification

Primary Category

download file sharing71% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

download file sharing
71%
technology software
37%
corporate
35%
forum
25%

Detected Features

Search
Comments
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
29142.251.127.97Google · CDNUnited States
AS15169Google LLC
29146.75.123.52Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
29104.26.4.120Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
29188.226.136.4Amsterdam, North Holland, Netherlands
AS14061DigitalOcean, LLC
1164--

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1610439B30224560E279650C1B921776DE213A12BC9AAF486D3F5A8DC63CDDF329753CE

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:5m+uryI2wkqF9lqImylz1fbyTSxxxxFpQc49fy3GYZ0q0o1A4mttjGCTHmG:SSwkqF9l7mylz1fLpQc49fy3GYZ0q0Dl

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:186990:BEQ1SaOhBBhQswYggAxD0BRGSSMEgZtkDokpCBCJAZGEmMDhwYAs0TgLILiRqRgsSmRiNABlCgjoIodHAwEyKCIEQAEJBrAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:7e3e3e7e1e3e7e7e
Perceptual Hash:94d4e11e3fe1231e
Difference Hash:e0a0f0926860d0d8
Wavelet Hash:3c3e3e7a1c7c1c60
Color Hash:#3a7878

Other Hashes

Crop Resistant:e0a0f0926860d0d8

Scan History

Scan history not available

Unable to load historical scan data