urlquery Suspicious - Anti-debugging code
VerdictSuspicious
Severitylow
WEBSITE ANALYSIS REPORT
https://mega.nz/file/w9nujaji#lpqvokl9nzxoyzcxiponxr-sqec4klc0cdzeexqqrw4
public
Suspicious activity
Review evidence →1 detection · review the detection signals
Report summary
Submitted and final observations · captured HTTP activity
- Submitted URL
- https://mega.nz/file/w9nujaji#lpqvokl9nzxoyzcxiponxr-sqec4klc0cdzeexqqrw4
- Submitted IP / ASN
66.203.127.18 AS205809 · MEGA Privacy Kft.
- Final URL
- https://mega.nz/file/w9nujaji#lpqvokl9nzxoyzcxiponxr-sqec4klc0cdzeexqqrw4
- Final IP / ASN
31.216.145.5 AS203055 · Datacenter Luxembourg S.A.
Final page
- Page title
- Download - MEGA
- Final DOM MIME
- text/html; charset=utf-8
- Final DOM size
- 279.4 KB (286069 bytes)
Detections
Activity
- HTTP requests
- 51
- Observed hosts
- 3
- Script records
- 7
Estimated HTTP data
- Sent
- ~25.8 KB
- Received
- ~13.67 MB
Page capture
Final browser state
Detection signals
URLQuery findings, Threat Detection Systems, and IDS alerts
URLQuery
1Host infrastructure
Observed hosts are context, not independent maliciousness verdicts
| Host | Rank | Registered | First seen | Last seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| mega.nz | 2896 | 2014-10-01 | 2014-11-03 | 2026-09-30 | 2.4 KB | 219.2 KB | 31.216.145.5 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| g.api.mega.co.nz | 196250 | 2012-07-25 | 2013-12-26 | 2026-09-24 | 2.1 KB | 1.6 KB | 66.203.125.11 | |
| eu.static.mega.co.nz | 472126 | 2012-07-25 | 2013-01-19 | 2026-09-30 | 21.3 KB | 13.46 MB | 66.203.127.23 | Nginx Web servers, Reverse proxies Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. |