Security Scan Report: link.mail.beehiiv.com

Redirected to:
https://www.beehiiv.com/powered-by?publication_logo=https%3A%2F%2Fmedi...
Site favicon
Submitted: Sep 28, 2026, 7:11:05 PMCompleted: Sep 28, 2026, 7:12:27 PMpubliccompleted

This website contacted 62 IPs in 4 countries across 61 domains to perform 257 HTTP transactions. The main domain is beehiiv.com and was registered 6 years ago.

Submitted URL: https://link.mail.beehiiv.com/v2/c/544bbb6ae26bf30de722bfa228e56d78d4309f88f1063a9c98541feca3ce4aff664f7dbb02bb6ba436bb19fabb091314626d0be84ac9676f6714a65736c43571ec28e451760bfeea9b6a9502ea97e831ba663848d4bfbf9449944ae880eb8230f4d41c4d5ba29a27121f8e1dfe74f65cfcc5b6ecc71aff1751fd0236b6331ca9921defccc7def1846bb3f96ada67bbacbf34ea7e8215db4eaceb7c40bc5a5ad9/f7449c9f28b29808

Effective URL:

https://www.beehiiv.com/powered-by?publication_logo=https%3A%2F%2Fmedi...
Redirected

The Cisco Umbrella rank of the primary domain is #22,341 of the top 1 million websites

AI Security Verdict

Safe Website

Confidence: 92%

0
Risk Score

Official beehiiv newsletter platform page. Email link redirects to beehiiv's own established domain; no forms, no credential harvesting, no IoC/YARA/IDS hits. The block notice is a routine bot-protection page, not a threat.

Safety Factors (5)
Established ~6-year-old domain with top-100K reputation ranking
Capture redirects across domains and lands on the brand's own official site — settles the brand question in favor of legitimacy
No credential, login, or payment forms present
No malware, IoC, IDS, or phishing indicators detected
Self-branded page: title and meta description match beehiiv's own domain
Domain age information unavailable

Details

Page Title

Powered by beehiiv — grow your newsletter

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'link.mail.beehiiv.com' is registered and includes subdomain 'link.mail'. The core label 'beehiiv' covers 7 characters split between 4 vowels and three consonants. Word splitting yields 3 words: bee, hi, iv. Average segment length settles at 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://link.mail.beehiiv.com/v2/c/544bbb6ae26bf30de722bfa228e56d78d4309f88f1063a9c98541feca3ce4aff664f7dbb02bb6ba436bb19fabb091314626d0be84ac9676f6714a65736c43571ec28e451760bfeea9b6a9502ea97e831ba663848d4bfbf9449944ae880eb8230f4d41c4d5ba29a27121f8e1dfe74f65cfcc5b6ecc71aff1751fd0236b6331ca9921defccc7def1846bb3f96ada67bbacbf34ea7e8215db4eaceb7c40bc5a5ad9/f7449c9f28b29808

Page Load Overview

16.40s
Total Load Time
7.1 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-us
Text Length:6,734 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software45% confidence
Type: spa
Method: ml+structural

All Detected Categories

technology software
45%
news media journalism
44%
corporate
35%

Detected Features

Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
13104.16.23.120Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4104.16.24.120Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4146.75.121.40Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
4185.111.111.158Frankfurt am Main, Hesse, Germany
AS212238Datacamp Limited
434.111.73.67Google · CDNKansas City, Missouri, United States
AS396982Google LLC
4142.251.20.95Google · CDNUnited States
AS15169Google LLC
4192.178.183.97Google · CDNUnited States
AS15169Google LLC
434.185.146.57Google · CDNFrankfurt am Main, Hesse, Germany
AS396982Google LLC
434.120.250.63Google · CDNKansas City, Missouri, United States
AS396982Google LLC
4142.251.110.94Google · CDNUnited States
AS15169Google LLC
25762--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T134458DE87F5051FCE44643F89B3B89A8712BE0EE9B059964F39DBA505B40AFC8C459C3

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:8SvuOi55dDFE2r6wpdB42zWxzpaZBf+6DFE2r6wpdB42zWxRdqZBZGGTZwgX:6r6ud+M8ir6ud+MS4X

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:1226107:2AGAnkAF3YAQwAsRg4hKcMAQIhEgkWoWLwSCjaFAkpKC0EYYQzOGDEgRUBIgDIToQgYTBIwQ8KEiADgBADgBIQABBA5clcGE

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:46193d1810180019
Perceptual Hash:8ad5b57524558f54
Difference Hash:867161b131f1d161
Wavelet Hash:77393d19193d013d
Color Hash:#ac7a53

Scan History

Scan history not available

Unable to load historical scan data