urlquery Suspicious - Anti-debugging code
VerdictSuspicious
Severitylow
WEBSITE ANALYSIS REPORT
http://mega.nz/folder
public
Suspicious activity
Review evidence →2 detections · review the detection signals
Report summary
Submitted and final observations · captured HTTP activity
- Submitted URL
- http://mega.nz/folder
- Submitted IP / ASN
31.216.144.5 AS203055 · Datacenter Luxembourg S.A.
- Final URL
- https://mega.nz/login
- Final IP / ASN
- 31.216.144.5 AS203055 · Datacenter Luxembourg S.A.
Final page
- Page title
- Login - MEGA
- Final DOM MIME
- text/html; charset=utf-8
- Final DOM size
- 261.2 KB (267436 bytes)
Detections
Activity
- HTTP requests
- 92
- Observed hosts
- 3
- Script records
- 13
Estimated HTTP data
- Sent
- ~46.6 KB
- Received
- ~25.35 MB
Page capture
Final browser state
Detection signals
URLQuery findings, Threat Detection Systems, and IDS alerts
URLQuery
1Host infrastructure
Observed hosts are context, not independent maliciousness verdicts
| Host | Rank | Registered | First seen | Last seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| mega.nz | 2896 | 2014-10-01 | 2014-11-03 | 2026-06-21 | 4.4 KB | 425.7 KB | 31.216.144.5 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| eu.static.mega.co.nz | 472126 | 2012-07-25 | 2013-01-19 | 2026-06-21 | 37.9 KB | 24.93 MB |  66.203.127.13 | Nginx Web servers, Reverse proxies Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. |
| g.api.mega.co.nz | 196250 | 2012-07-25 | 2013-12-26 | 2026-06-23 | 4.3 KB | 3.1 KB | 66.203.125.12 |