Security Scan Report: r20.rs6.net

Redirected to:
https://r20.rs6.net/error.jsp?e=xmlhmqgbb
Site favicon
Submitted: Completed: publiccompleted
This website contacted 3 IPs in 1 country across 2 domains to perform 5 HTTP transactions. The main domain is rs6.net and was registered 24 years ago.

Submitted URL: https://r20.rs6.net/tn.jsp?f=001DyiWYWxw55me5hKOpLoWPi2zPLufLvAVkUsxNuI1kxlGri6oJhvtLT2sS7xHZfY3Cr1DqIPaXnc6nE5f8fbx01TJVPTQdG5PvJ-bzaFb-WS_TfDKUrZRLdK0M17V4KAXbREOpl8kJu0=&c=&ch==&__=/asdf/

Effective URL:
https://r20.rs6.net/error.jsp?e=xmlhmqgbb
Redirected

The Cisco Umbrella rank of the primary domain is #9,051 of the top 1 million websitesTop 10K Site

AI Security Verdict

Moderate Risk

Confidence: 55%

4
Risk Score

Constant Contact's own 'page not found' error on its 24-year-old tracking domain; no forms or malicious code. Only signal is one unverified report of link abuse on the shared domain — treat any link received with this domain as unverified until the destination is checked.

Risk Factors (2)
Unverified single-source threat-intel report of wallet-drainer/phishing abuse associated with the r20.rs6.net tracking domain
Link-tracking redirect service means the final destination cannot be verified from this scan; Constant Contact links are frequently abused in phishing campaigns
Safety Factors (5)
Well-established domain (24 years old, Umbrella top 10K)
Page is Constant Contact's own error page, self-branded and matching the domain's owner
No forms of any kind; no credential, password or payment fields
No malicious JavaScript, no obfuscation, no cross-origin credential exfiltration
No hunting rule, IDS, Safe Browsing or kit-roster hits
Domain age information unavailable

Details

Page Title

Constant Contact

Scan Type

public

Domain Name Analysis

Domain 'r20.rs6.net' uses the network infrastructure generic top-level domain (.net); it also runs on subdomain 'r20'. Its registrable label 'rs6' stretches across 3 characters containing zero vowels alongside two consonants; bonus characters include 1 digit. Tokenizing the label suggests two words: rs, 6. Median word length comes out to 1.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Oops! The requested page was not found. This could be because: + You followed a broken or out-of-date link. + Your email client cut off part of the URL of the link and we no longer recognize it. +...

Page Load Overview

1.40s
Total Load Time
255 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:50%
Script:Latin
Direction:ltr

Detection Details

Text Length:331 chars
Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence
Type: static
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3208.75.122.11United States
AS40444Constant Contact, Inc
165.8.131.53Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
165.8.131.44Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
53--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T163212E3A10E4511356D0C1C86A4A3316CEC2D527DDA3DEC1B4AC824CAFD9EC78C5318D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

24:kxeCsuPQF0FEoAtO9Ecb8ANRaiR6WnA7k/R+70b2AoHEemGo3j:dphxaEu56t4bTEe

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:1360:gAAAASAAAgAAAAIAAUABQCAgAAggAAAACIAAABABQBAAAACAACAAACASAAAAAAAAAAQgAAAAAAAAAAIIAQAAAAAEAAKAIABA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:003c3c24243c0000
Perceptual Hash:b322cc993366cc9b
Difference Hash:0028284c48280000
Wavelet Hash:dcfcfce42c3c0000
Color Hash:N/A

Other Hashes

Crop Resistant:0028284c48280000

Scan History

Scan history not available

Unable to load historical scan data