Security Scan Report: mega.nz

Site favicon
Submitted: Jan 7, 2026, 8:02:39 AMCompleted: Jan 7, 2026, 8:03:41 AMpubliccompleted
Loading additional data...

Summary

This website contacted 5 IPs in 2 countries across 3 domains to perform 10 HTTP transactions. The main domain is mega.nz.

Submitted URL: https://mega.nz/file/OHwhWQ7S#RLSc9dZck_Y3MJZhwr2Zve3dDRPT94S4i7reCHp50n8

The Cisco Umbrella rank of the primary domain is #61,525 of the top 1 million websites

AI Security Verdict

Confirmed Scam

Confidence: 95%

9
Risk Score

Page hosts hidden password fields on mega.nz, indicating credential harvesting – confirmed phishing scam.

Risk Factors
Hidden password fields (credential harvesting technique)
Login form on a cloud storage service
Combination of cloud storage domain and password collection
Domain age information unavailable

Details

Page Title

Download - MEGA

Scan Type

public

Language

🇺🇸

English

(42% confidence)

Category

social_media

(70%)

Domain Information

Domain 'mega.nz' uses the New Zealand country-code top-level domain (.nz) with no subdomain. Count 4 characters in 'mega' containing two vowels alongside two consonants. Tokenizing the label suggests one word: mega. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://mega.nz/file/OHwhWQ7S#RLSc9dZck_Y3MJZhwr2Zve3dDRPT94S4i7reCHp50n8

Page Load Overview

3.47s
Total Load Time
10
HTTP Requests
3
Domains
285 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:42%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:42%
Script Type:Latin
Text Length:37,277 chars
Detector Agreement:75%

Website Classification

Primary Category

social_media70% confidence
Type: webapp
Method: structural

All Detected Categories

social_media
70%
e-commerce
50%
forum
50%

Detected Features

Login Form
Search
Payment
Comments

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
231.216.144.5Bettembourg, Esch-sur-Alzette, Luxembourg
AS203055Datacenter Luxembourg S.A.
231.216.145.5Bettembourg, Esch-sur-Alzette, Luxembourg
AS203055Datacenter Luxembourg S.A.
266.203.127.13Amsterdam, North Holland, Netherlands
AS205809MEGA Cloud Services Limited
266.203.125.11Bettembourg, Esch-sur-Alzette, Luxembourg
AS203055Datacenter Luxembourg S.A.
266.203.124.37Bettembourg, Esch-sur-Alzette, Luxembourg
AS203055Datacenter Luxembourg S.A.
105--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T17B543071A155AA7392A3D2DAF27A9B0B73E1C249CE87134153FCD38C0FE6C95EE06116

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:ZDArGTjLFRVCaDxle+nCqmRNOFGcrQLUcs38HIhafqY6TKEJ:ZDAr8CurQC8HIhafqce

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:293920:FYCbAeIkAFUXyJixcAsBqRSl4IFGeRGM80iGiawAlEh5lmAWogkBIL2NAFgQQyU3EQGKAE4OBCMAFQnESgCKLpAQ4uMWIgCI

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fe818181818181ff
Perceptual Hash:fa74d054d452d4da
Difference Hash:8003130b0b174941
Wavelet Hash:ff8181818181bdff
Color Hash:#878dc5

Other Hashes

Crop Resistant:8003130b0b174941

Scan History

Scan history not available

Unable to load historical scan data