bit.ly - URL scan, 23 Aug 2026
MalwareAnalyzer by Cyble scanned bit.ly and returned a unknown verdict (score 6). 1 domain and 0 IPs were contacted. 26 malware samples communicate with this URL (Maldoc, Phishing). This is a point-in-time observation from 23 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score 6) · Confidence 12%
- Scanned URL:
https://bit.ly/2Kz5Fyk - Domain: bit.ly
- Scan tier: fast · observed 2026-08-23 21:38:22 UTC
Malware communicating with this URL (26)
These samples were observed contacting or being served from bit.ly. Each links to its full analysis.
- Maldoc - referenced ·
6b57d68b6392cb44a62c5b7d68bf2566· first seen 2026-08-23 - 1edddbb1f62b69c632c5a558b8a24a4e6531fa5c286a915c854ec865150d5c5b - referenced ·
1edddbb1f62b69c632c5a558b8a24a4e· first seen 2026-08-23 - c828ed8736a781c9cab0cfecae84fcdcabd89320767c19272f9e06c0166b8079 - referenced ·
c828ed8736a781c9cab0cfecae84fcdc· first seen 2026-08-22 - 48977bb365ff0a866a675942f0df2477d9daa8bfcc4bf109fc5c9cea9945d061 - referenced ·
48977bb365ff0a866a675942f0df2477· first seen 2026-08-22 - be1d2d89603182c19507a2c8a80afa45cab9aa9b228db4eb88e4a5c335b11668 - referenced ·
be1d2d89603182c19507a2c8a80afa45· first seen 2026-08-21 - df0d093b69189150a507865b74bef77ada93cb7dcd8299383c9eb0f4d53f598b - referenced ·
df0d093b69189150a507865b74bef77a· first seen 2026-08-21 - df09af1faee3a5b5d585ce268dab72265e0ea36df6f95343e3e0153f5ec755e3 - referenced ·
df09af1faee3a5b5d585ce268dab7226· first seen 2026-08-21 - 5a59a539fd641a9bccfb867ed853aeb8a0be17e919164a089598921a010a6d36 - referenced ·
5a59a539fd641a9bccfb867ed853aeb8· first seen 2026-08-21 - 5e9d8d758a6195b29c57ca50480475e708ff3474ad797abd3738128ede0bb2f1 - referenced ·
5e9d8d758a6195b29c57ca50480475e7· first seen 2026-08-20 - 760d803a44e22be43986ceafa4f99ac2dc1d211fb01320fcfd7e2f45772b7096 - referenced ·
760d803a44e22be43986ceafa4f99ac2· first seen 2026-08-20 - Phishing - referenced ·
b675ff3abc4915e675a311c4015ba576· first seen 2026-08-19 - 3a8e2058dda5a64fe16ae0306ddae903090621f09ddf2b24c3f6ca50688d7e80 - referenced ·
3a8e2058dda5a64fe16ae0306ddae903· first seen 2026-08-17 - 6ad6adbc2e1a6e47bf8aaab1f2e0be8a07266e28c3a901ce5bb99fa330ee0f6a - referenced ·
6ad6adbc2e1a6e47bf8aaab1f2e0be8a· first seen 2026-08-17 - Phishing - referenced ·
cf03dfd05fb098d49bb718b8a71ad116· first seen 2026-08-16 - 11bc7129169e04b0121d7a9bee667c278975920695a0e4c6ee086edaa7fa6e3b - referenced ·
11bc7129169e04b0121d7a9bee667c27· first seen 2026-08-16
Why this verdict
- Submitted via URL shortener (bit.ly) — expanded before scan
- Target did not respond (DNS/connection failure or timeout); verdict from URL structure only
Observed indicators
- bit.ly
- https://bit.ly/2Kz5Fyk
Other scans of bit.ly (10)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 22 Aug 2026 - unknown ·
https://19bet-facebook.sa.com/ - 21 Aug 2026 - suspicious ·
https://abc.com/ - 21 Aug 2026 - suspicious ·
https://www.linkedin.com/in/adriancunanan - 21 Aug 2026 - unknown ·
http://wanditata.blogspot.com/2016/12/langkah-kongkrit-memulai-bisnis-tanpa.html - 20 Aug 2026 - unknown ·
https://cgmorenanews.com.br/ckfinder/userfiles/files/lavelaserinajesugesiwebe.pdf - 20 Aug 2026 - unknown ·
https://a1983s.com/ - 20 Aug 2026 - suspicious ·
https://5thaveseniors.org/userfiles/file/refanos.pdf - 20 Aug 2026 - suspicious ·
https://pandoraecza.com/genelresimler/file/bexulaxoxopiduwupe.pdf - 20 Aug 2026 - suspicious ·
https://pandoraecza.com/genelresimler/file/bexulaxoxopiduwupe.pdf - 20 Aug 2026 - suspicious ·
http://guss-ex.de/uploads/fck/file/pedogotapomera.pdf
Questions about bit.ly
- Is bit.ly safe?
- The scan of bit.ly on 23 Aug 2026 reached no verdict either way (score 6). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with bit.ly?
- 26 analysed samples communicate with this URL, including Maldoc, Phishing.
- How was bit.ly checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of bit.ly
Scanned on MalwareAnalyzer by Cyble · Open interactive scan