Security Scan Report: link.mail.beehiiv.com

Bot Protection Detected

This website is protected by Cloudflare bot protection. The page may show differently for regular users.

Submitted: Completed: publiccompleted
This website contacted 4 IPs in 1 country across 2 domains to perform 10 HTTP transactions. The main domain is beehiiv.com and was registered 6 years ago.

Submitted URL: https://link.mail.beehiiv.com/v2/c/80970e72e7405ebcb4ecc1fc416d6d4d4ca3d7c429f90cd2ea96c903a1e80ad2a903b48855da35b389a684f6023cf165f7d5cc0683ce48c47305d252b51cc796f5693071d7abc49e1701cbe17b8c6fc819cc0589687eb5e02d28b30a4077e3a596eb7288c2734557565c59547e3649d9eefc8447ef8213adf138944b26310ce1788d06e3d51b72e599156ccf70033a13b495c9c9a8529cb112b7bb6f682219a9/5d5e3c7db4888bb5

The Cisco Umbrella rank of the primary domain is #22,341 of the top 1 million websites

AI Security Verdict

Low Risk

Confidence: 65%

2
Risk Score

Bot-protection wall on an established, well-ranked beehiiv link host. No Indicators of Compromise, YARA hits or impersonation; page content is unverified, so treat as low risk.

Risk Factors (2)
Page content could not be evaluated because the capture is gated behind a Cloudflare challenge — forms, credential fields and script behaviour are unknown rather than proven absent.
Two HIGH network IDS alerts for obfuscated JavaScript were raised (likely the bot-protection script itself, but unverified).
Safety Factors (5)
Domain is ~6 years old and classified as well-established.
Domain is ranked inside the Cisco Umbrella top 100K (~22,341), a strong indicator of a real, trafficked service.
No Indicators of Compromise, no YARA malware matches and no vetted malicious kit in the roster.
No JavaScript behavioural signals of credential exfiltration or DevTools-blocking phishing behaviour were detected.
link.mail.beehiiv.com is the link-tracking/redirect host of the beehiiv newsletter platform, not a typosquat of another brand.
Domain age information unavailable

Details

Page Title

Attention Required! | Cloudflareother network

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'link.mail.beehiiv.com' is registered and includes subdomain 'link.mail'. The second-level label 'beehiiv' is 7 characters long split between four vowels and three consonants. Segmentation suggests 3 words: bee, hi, iv. Average segment length settles at two characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://link.mail.beehiiv.com/v2/c/80970e72e7405ebcb4ecc1fc416d6d4d4ca3d7c429f90cd2ea96c903a1e80ad2a903b48855da35b389a684f6023cf165f7d5cc0683ce48c47305d252b51cc796f5693071d7abc49e1701cbe17b8c6fc819cc0589687eb5e02d28b30a4077e3a596eb7288c2734557565c59547e3649d9eefc8447ef8213adf138944b26310ce1788d06e3d51b72e599156ccf70033a13b495c9c9a8529cb112b7bb6f682219a9/5d5e3c7db4888bb5

Page Load Overview

0.45s
Total Load Time
996 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-us
Text Length:396 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software74% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
74%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4104.16.24.120Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.16.23.120Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.18.94.41Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.18.95.41Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
104--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1BEC17476BABD213E10A391A236BDE3483AB0D113DB67019072ACC1381F5EF96FD1B595

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:ljHjCIjuTkDa/D+DMFWC8pZqXKHvpIkdlwnRt3vaQxvbbj+inx/IGQ:ljHjDjusa/SoWn6aHvFdlwn/3CejbSiQ

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:5650:JSCSQqARAAcC6ACANJgCSAAALABSWAAhAAICoLGClIEkCniCgAQAgIIAEKAoAAACcGgEoyTYBkphJARBIwAOhNAAAGkxBZAE

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:c780002424fec3ff
Perceptual Hash:b722bcb492bccc2c
Difference Hash:1c0e50684870161c
Wavelet Hash:c782202424fec7ff
Color Hash:#53ac62

Other Hashes

Crop Resistant:1c0e50684870161c

Scan History

Scan history not available

Unable to load historical scan data