urlquery Suspicious - Anti-debugging code
VerdictSuspicious
Severitylow
WEBSITE ANALYSIS REPORT
https://mega.nz/file/3m5GTSoR#AUeSz6fOGnGg5g-4vivuaZkwmKDVCZZ6OZyhWO8Eo4E
public
Suspicious activity
Review evidence →2 detections · review the detection signals
Report summary
Submitted and final observations · captured HTTP activity
- Submitted URL
- https://mega.nz/file/3m5GTSoR#AUeSz6fOGnGg5g-4vivuaZkwmKDVCZZ6OZyhWO8Eo4E
- Submitted IP / ASN
31.216.145.5 AS203055 · Datacenter Luxembourg S.A.
- Final URL
- https://mega.nz/file/3m5GTSoR#AUeSz6fOGnGg5g-4vivuaZkwmKDVCZZ6OZyhWO8Eo4E
- Final IP / ASN
- 31.216.145.5 AS203055 · Datacenter Luxembourg S.A.
Final page
- Page title
- Download - MEGA
- Final DOM MIME
- text/html; charset=utf-8
- Final DOM size
- 280.4 KB (287095 bytes)
Detections
Activity
- HTTP requests
- 50
- Observed hosts
- 3
- Script records
- 7
Estimated HTTP data
- Sent
- ~25.3 KB
- Received
- ~13.51 MB
Page capture
Final browser state
Detection signals
URLQuery findings, Threat Detection Systems, and IDS alerts
URLQuery
1Host infrastructure
Observed hosts are context, not independent maliciousness verdicts
| Host | Rank | Registered | First seen | Last seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| eu.static.mega.co.nz | 472126 | 2012-07-25 | 2013-01-19 | 2026-08-20 | 20.8 KB | 13.29 MB |  94.24.37.161 | Nginx Web servers, Reverse proxies Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. |
| g.api.mega.co.nz | 196250 | 2012-07-25 | 2013-12-26 | 2026-08-20 | 2.1 KB | 1.5 KB | 66.203.125.15 | |
| mega.nz | 2896 | 2014-10-01 | 2014-11-03 | 2026-08-20 | 2.4 KB | 218.0 KB | 31.216.145.5 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |