The scan of www.6.ly on 22 Aug 2026 reached no verdict either way (score -12). Too little was captured to judge it, which is an unknown rather than a pass.

What malware is associated with www.6.ly?

2 analysed samples communicate with this URL, including Zusy.

How was www.6.ly checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

www.6.ly - URL scan, 22 Aug 2026

MalwareAnalyzer by Cyble scanned www.6.ly and returned a unknown verdict (score -12). The page resolved to 157.90.66.230 on Hetzner Online GmbH in DE. 4 domains and 1 IP were contacted, over 2 HTTP requests. 2 malware samples communicate with this URL (Zusy). The request followed 1 redirect before landing. This is a point-in-time observation from 22 Aug 2026; the page may have changed since.

Scan result

Verdict: unknown (score -12) · Confidence 15%
Scanned URL: https://6.ly/
Domain: www.6.ly · IP: 157.90.66.230 · AS24940 · DE
Server: nginx/1.22.1
Page title: 6.ly
HTTP status: 200 · text/html; charset=UTF-8
TLS issuer: C=US, O=Let's Encrypt, CN=YE1 · valid to Oct 18 18: · subject CN=shrunken.com
HTTP requests captured: 2
Scan tier: fast · observed 2026-08-22 23:37:09 UTC

Redirect chain

https://6.ly/
https://www.6.ly/

Malware communicating with this URL (2)

These samples were observed contacting or being served from www.6.ly. Each links to its full analysis.

Zusy - referenced · 956b15e864f88b4f8a08c561d7a70992 · first seen 2026-08-22
normal_5f86f8b07fad2.pdf - referenced · ab2438da4164b4e27c721e6e37b3d107 · first seen 2026-08-12

Antivirus & YARA (0 of 48 engines)

No engine flagged this page's content.

Why this verdict

Valid TLS, no impersonation or off-origin credential post

Detected technologies

Nginx

Contacted infrastructure

157.90.66.230 - AS24940 Hetzner Online GmbH (Germany)

Observed indicators

www.6.ly
fonts.bunny.net
challenges.cloudflare.com
db-ip.com
157.90.66.230
https://www.6.ly/
https://fonts.bunny.net/
https://fonts.bunny.net/css?family=inter:300,400,500,600,700,800|jetbrains-mono:400,500,600&display=swap
https://www.6.ly/build/assets/app-H8SqYQw0.css
https://www.6.ly/build/assets/app-CrG2wnyX.js
https://www.6.ly/login
https://www.6.ly/register
https://www.6.ly/setlocalization
https://www.6.ly/cutguestlink
https://challenges.cloudflare.com/turnstile/v0/api.js
https://www.6.ly/faq
https://www.6.ly/imressum
https://www.6.ly/terms
https://www.6.ly/contact_us
https://www.6.ly/report

Questions about www.6.ly

Is www.6.ly safe?: The scan of www.6.ly on 22 Aug 2026 reached no verdict either way (score -12). Too little was captured to judge it, which is an unknown rather than a pass.
What malware is associated with www.6.ly?: 2 analysed samples communicate with this URL, including Zusy.
How was www.6.ly checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the fast tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of www.6.ly

Scanned on MalwareAnalyzer by Cyble · Open interactive scan