Security Scan Report: link.mail.beehiiv.com

Redirected to:
https://www.beehiiv.com/powered-by?publication_logo=https%3A%2F%2Fmedi...
Site favicon
Submitted: Sep 21, 2026, 7:06:31 PMCompleted: Sep 21, 2026, 7:07:31 PMpubliccompleted

This website contacted 42 IPs in 4 countries across 49 domains to perform 206 HTTP transactions. The main domain is beehiiv.com and was registered 30 years ago.

Submitted URL: https://link.mail.beehiiv.com/v2/c/19f384e9e3bd3284a5dece854e6d318bb08c21740f935914f255337d6a52b9b0acf9cc3ae6dc4bfed25f68f4e9e718ff961ffb3b00501b0a563bf4e8c6ca83b80f9fd5e5dcdf9926365512180f350cfc170e6b5cd50e5abf5f3a3019b7a48a333e1422748bac658e5b239f644333cf41b7b1ef7555063b8034d9b192576b42650190ac03b4b8e3c8245670133d4f2e6bd8ebf3f7159d90a1e3a6460b7827a819/4d0e7ffd5ee7b3a0

Effective URL:

https://www.beehiiv.com/powered-by?publication_logo=https%3A%2F%2Fmedi...
Redirected

The Cisco Umbrella rank of the primary domain is #22,341 of the top 1 million websites

AI Security Verdict

Safe Website

Confidence: 92%

0
Risk Score

Beehiiv's own newsletter platform page; redirect ends on the brand's official domain. No forms, no malware, no content intel hits — only generic abuse tags on unrelated third-party IPs. Legitimate.

Safety Factors (5)
Redirect terminates on the brand's own well-established domain (beehiiv.com)
5+ year old domain with top-100K Cisco Umbrella ranking
Zero credential or payment forms — verified from captured DOM
No malware/YARA/IDS/Safe Browsing indicators
Page content is a coherent SaaS marketing/landing page for a newsletter platform, with legal information and privacy policy references
Domain age information unavailable

Details

Page Title

Powered by beehiiv — grow your newsletter

Scan Type

public

Domain Name Analysis

Domain 'link.mail.beehiiv.com' uses the commercial generic top-level domain (.com); it also runs on subdomain 'link.mail'. Its registrable label 'beehiiv' stretches across 7 characters with 4 vowels and 3 consonants. Splitting it apart reveals three words: bee, hi, iv. Expect two characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://link.mail.beehiiv.com/v2/c/19f384e9e3bd3284a5dece854e6d318bb08c21740f935914f255337d6a52b9b0acf9cc3ae6dc4bfed25f68f4e9e718ff961ffb3b00501b0a563bf4e8c6ca83b80f9fd5e5dcdf9926365512180f350cfc170e6b5cd50e5abf5f3a3019b7a48a333e1422748bac658e5b239f644333cf41b7b1ef7555063b8034d9b192576b42650190ac03b4b8e3c8245670133d4f2e6bd8ebf3f7159d90a1e3a6460b7827a819/4d0e7ffd5ee7b3a0

Page Load Overview

8.58s
Total Load Time
4.9 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-us
Text Length:6,734 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software45% confidence
Type: spa
Method: ml+structural

All Detected Categories

technology software
45%
news media journalism
44%
corporate
35%

Detected Features

Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
42104.16.23.120Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4104.16.24.120Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4146.75.121.40Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
4185.111.111.155Frankfurt am Main, Hesse, Germany
AS212238Datacamp Limited
434.111.73.67Google · CDNKansas City, Missouri, United States
AS396982Google LLC
474.125.29.95Google · CDNUnited States
AS15169Google LLC
4142.251.110.97Google · CDNUnited States
AS15169Google LLC
4146.75.121.91Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
434.117.192.206Google · CDNKansas City, Missouri, United States
AS396982Google LLC
434.185.146.57Google · CDNFrankfurt am Main, Hesse, Germany
AS396982Google LLC
20642--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T10E218227FD2D0ADF30D2B27159FC7204D3E48EA2D30F2881F9E4912A8ED4F6D9846082

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

24:hERujE85TjTG/y8wjGdFRrLksPk11kANaLnjD+DM0jJs30jRRjCy4m5EG:eujV5Tjy/PwjGdTP8DaLnjD+DMMs0j/L

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:1130:BAAAAgAAAAAAIAAAABACAAABAABQEAAAAAIAAKAABIAEADAAAAQAAAAAACAAAAACIAAEAwCAAAgAAAQAAAAAAEAAAAAABAAE

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:cfc7c7ffffffffe7
Perceptual Hash:b03132cfc6cccecc
Difference Hash:181e1c100000000c
Wavelet Hash:fcc0c0f830303c00
Color Hash:#40931f

Other Hashes

Crop Resistant:181e1c100000000c

Scan History

Scan history not available

Unable to load historical scan data