Security Scan Report: lu.api.mega.co.nz

Redirected to:
https://mega.io/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 4 IPs in 2 countries across 7 domains to perform 154 HTTP transactions. The main domain is mega.co.nz.

Submitted URL: https://lu.api.mega.co.nz

Effective URL:
https://mega.io/
Redirected

The Cisco Umbrella rank of the primary domain is #27,291 of the top 1 million websites

AI Security Verdict

Moderate Risk

Confidence: 85%

4
Risk Score

Site appears legitimate with no phishing or malware signs; minor concerns stem from heavily obfuscated JavaScript.

Risk Factors (2)
High JavaScript obfuscation score (charcode manipulation, base64 encoding, high entropy)
Redirect from subdomain lu.api.mega.co.nz to a different domain mega.io
Safety Factors (4)
Long‑standing domain (registered 2012)
No malicious IoC or hunting-rule matches
No credential exfiltration or suspicious network alerts
Brand alignment with domain
Domain age information unavailable

Details

Page Title

MEGA: Protect your Online Privacy

Scan Type

public

Domain Name Analysis

The domain 'lu.api.mega.co.nz' uses the New Zealand country-code top-level domain (.co.nz) with subdomain 'lu.api'. Its registrable label 'mega' stretches across 4 characters split between 2 vowels and two consonants. Breaking it apart gives one word: mega. No strong language cues emerged from the frequency lists.

Screenshot

@ Products Solutions. Business Pricing Resources: ¥; Online privacy for everyone — secure encrypted cloud storage by default Privacy i is Rot’an’ ‘option ‘with MEGA; it'S'standard: we believe'e data...

Page Load Overview

8.09s
Total Load Time
7.1 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-NZ
Text Length:9,979 chars
Detector Agreement:80%

Website Classification

Primary Category

corporate70% confidence
Type: dynamic
Method: structural

All Detected Categories

corporate
70%
forum
40%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4066.203.125.11Bettembourg, Esch-sur-Alzette, Luxembourg
AS203055Datacenter Luxembourg S.A.
3866.203.125.12Bettembourg, Esch-sur-Alzette, Luxembourg
AS203055Datacenter Luxembourg S.A.
3866.203.127.23Amsterdam, North Holland, Netherlands
AS205809MEGA Cloud Services Limited
3831.216.144.5Bettembourg, Esch-sur-Alzette, Luxembourg
AS203055Datacenter Luxembourg S.A.
1544--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T14F83127290F0507703A381C9E621AB1EBAD6DA0BC98B4B64B7FC47D41FD6DD6E803619

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:JladSYJkKkckck2kmkVkMkmk7kF61KJHT8/Q2T/VuZdapzN:SoYJkKkckck2kmkVkMkmk7kF68UAapx

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:86251:iBcIrNQlwIkFA2CQA+FkJSgkVw0YAtAQCQaWKAqE3YFAIShDoQghQYg8MzZAeIBAWmAkCWgdOgAKQJiBW8oQgwJiKFfC6cgR

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:dcfef6c367667cfd
Perceptual Hash:80fddb02a92abf8a
Difference Hash:39a0168e8eccc911
Wavelet Hash:d8dcc24367647cc9
Color Hash:N/A

Scan History

Scan history not available

Unable to load historical scan data