Scan report · about 1 month agoPublic

www.beehiiv.com

104.16.24.120AS13335 · US

Submittedhttps://www.beehiiv.com/

Verdict

1 of 7 enginesSuspiciousAutomated

Be careful — warning signs found

Automated

This site shows signs commonly seen in scams or impersonation, but we could not confirm it for certain. It may be a real threat, or it may be a legitimate site that simply looks unusual to our automated checks.

What to do

Avoid entering passwords or payment details until you are sure it is genuine. Open the company directly from its known website or app instead of this link. Check the evidence below and escalate to your analyst if unsure.

"Suspicious" is a caution, not a confirmation — it can be a false alarm. The evidence below explains why it was flagged.

Findings

Strongest first

Suspicious fileSuspicious content in the downloaded file

d3429e6a-7486-4e03-a652-8f2b8519ade6.html

Our Content Inspection engine downloaded the file this URL serves and analyzed it. The payload shows traits commonly seen in malware. Treat it as unsafe until verified.

Success

SHA-256 75a4347ad1d6c97fe8562b02986e0879cbe76f981cfdf4a8504cb268faaaab21

InfoBrand impersonation detected

Google · low

The page presents itself as a known brand (brand keywords/branding detected).

Analyst noteLow/medium confidence (keyword only) — can be a news article or partner page. Corroborate before acting.

InfoCross-domain scripts injected at runtime

50 script(s)

The page dynamically injected scripts from other domains. This is extremely common on legitimate sites (CDNs, analytics, asset domains) and is shown for context only.

Analyst noteNoisy by itself — a CDN/asset domain (e.g. a brand's own *.githubassets.com) is normal. Only meaningful if the source domain is unrelated/suspicious.

Infrastructure

IP: 104.16.24.120CLOUDFLARENET - Cloudflare, Inc., US · AS13335US
TLS: CN=WE1, O=Google Trust Services, C=US · expires Nov 22, 2026

WHOIS

Registrar: Cloudflare, Inc.
Created: Oct 8, 2020
Expires: Oct 8, 2026
Nameservers: erin.ns.cloudflare.comoswald.ns.cloudflare.com

11 malicious10 suspicious

Hashes & fingerprints

Page Hash3aa7f340f6dff6ac9988a6697a99b6a627ee3d79455af4197c8840ac5c7ddb14 Favicon Hashce79e0f035bf4e685977d2898b538a78aa96dcd6e3fa5ada197aca72f40d40c5 DOM Hashf678bfc686c394960dc18ef2f4813ac28365de4e24a875972a830b321c7e2e4d Screenshot pHashe01f1f0f1ec31e38 JARM27d27d27d00027d00042d43d00041df04c41293ba84f6efe3a613b22f983e6 JA4Xa373a9f83c6b_7022c563de38_2e3757343cb0 Cert ThumbprintCD6F292B0FA350AFBA1DB9FA95867EF35708D899 Cert IssuerCN=WE1, O=Google Trust Services, C=US

Page capture

Live

Title “Newsletter Platform: Create Newsletters and Websites - beehiiv” · brand shown: Google (low)

Visit Site

Engines

7 · time to verdict