Security Scan Report: mega.nz

Site favicon
Submitted: Completed: publiccompleted
This website contacted 10 IPs in 3 countries across 3 domains to perform 54 HTTP transactions. The main domain is mega.nz.

Submitted URL: https://mega.nz/file/uPZRkbbQ#DN_H5tIAFW4KrDY9QJH-VKgxflfPFNgLRhdc1qxKRwg

The Cisco Umbrella rank of the primary domain is #61,525 of the top 1 million websites

AI Security Verdict

Safe Website

Confidence: 88%

1
Risk Score

Genuine MEGA file-sharing download page on the real mega.nz domain; self-branded with first-party account forms, no impersonation, no malware or phishing indicators.

Safety Factors (5)
Genuine, well-ranked cloud-storage domain (mega.nz) with self-branded metadata
No brand impersonation; all forms are first-party MEGA account screens
No cross-origin credential forms or JavaScript exfiltration detected
No hunting rule malware patterns, no known malicious kit, no content-malware threat-intel
Physical address visible on the site
Domain age information unavailable

Details

Page Title

Download - MEGA

Scan Type

public

Domain Name Analysis

Domain 'mega.nz' uses the New Zealand country-code top-level domain (.nz). Count 4 characters in 'mega' split between 2 vowels and 2 consonants. Breaking it apart gives one word: mega. The median word length lands at 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

M1) fo) HouseParty-v1.5.2.13984.zip 7.16 CB HouseParty-v1.5.2.13984.zip 716GB + ZIP compressed ) Preview not available. Download the file to view, or save to MEGA to open later. © Download G) Sa...

Page Load Overview

0.95s
Total Load Time
2.6 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:50%
Script:Latin
Direction:ltr

Detection Details

Text Length:30,030 chars
Detector Agreement:100%

All Detected Languages

🇺🇸en(100%)🇿🇦af(0%)

Website Classification

Primary Category

social_media70% confidence
Type: webapp
Method: structural

All Detected Categories

social_media
70%
forum
50%

Detected Features

Login Form
Comments

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4466.203.127.23Amsterdam, North Holland, Netherlands
AS205809MEGA Privacy Kft.
589.44.169.134Bettembourg, Esch-sur-Alzette, Luxembourg
AS203055Datacenter Luxembourg S.A.
566.203.125.12Bettembourg, Esch-sur-Alzette, Luxembourg
AS203055Datacenter Luxembourg S.A.
566.203.127.24Amsterdam, North Holland, Netherlands
AS205809MEGA Privacy Kft.
566.203.124.37Bettembourg, Esch-sur-Alzette, Luxembourg
AS203055Datacenter Luxembourg S.A.
566.203.125.14Bettembourg, Esch-sur-Alzette, Luxembourg
AS203055Datacenter Luxembourg S.A.
594.24.37.162Brussels, Brussels Capital, Belgium
AS205809MEGA Privacy Kft.
594.24.37.161Brussels, Brussels Capital, Belgium
AS205809MEGA Privacy Kft.
331.216.145.5Bettembourg, Esch-sur-Alzette, Luxembourg
AS203055Datacenter Luxembourg S.A.
231.216.144.5Bettembourg, Esch-sur-Alzette, Luxembourg
AS203055Datacenter Luxembourg S.A.
5410--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1634421B1A145AA7392E3D2D6E27A9B1B73E2C249CE87130153FCD38C0FE6C95ED06156

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:rM4JotbpNuK5cEiGJuT0oEUFy1enTvRNOFAVUDDCqi68CaWYt:rMFmodDCqH+

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:268604:LYJQArFQYopGQo2CBQ5jkw3wAAAAHVQPQwIgCAApQKiYJYIhwEUCFAUyEIIAHBBgEh1njXAYA9uAIJRCMYQUjYQYBwMaVCQa

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:7fffe7e7ffe7e7ff
Perceptual Hash:a288c872dc76dcdc
Difference Hash:c0532a29294d4d31
Wavelet Hash:7eff8181818181ff
Color Hash:07001000006

Other Hashes

Crop Resistant:c0532a29294d4d31

Scan History

Scan history not available

Unable to load historical scan data