Security Scan Report: r20.rs6.net

Redirected to:
https://r20.rs6.net/error.jsp?e=xmlhmqgbb
Site favicon
Submitted: Completed: publiccompleted
This website contacted 3 IPs in 1 country across 2 domains to perform 5 HTTP transactions. The main domain is rs6.net and was registered 24 years ago.

Submitted URL: https://r20.rs6.net/tn.jsp?f=001DyiWYWxw55me5hKOpLoWPi2zPLufLvAVkUsxNuI1kxlGri6oJhvtLT2sS7xHZfY3Cr1DqIPaXnc6nE5f8fbx01TJVPTQdG5PvJ-bzaFb-WS_TfDKUrZRLdK0M17V4KAXbREOpl8kJu0=&c=&ch==&__=/asdf/

Effective URL:
https://r20.rs6.net/error.jsp?e=xmlhmqgbb
Redirected

The Cisco Umbrella rank of the primary domain is #9,051 of the top 1 million websitesTop 10K Site

AI Security Verdict

High Risk

Confidence: 62%

7
Risk Score

Only an expired Constant Contact tracking link showing the platform's own 404 page, but the primary domain carries a single-source wallet-drainer report; no credential or payment form present on the captured page.

Risk Factors (2)
Single-source (unverified) wallet-drainer / phishing report against the primary domain r20.rs6.net
URL is an obfuscated tracking-redirect link with an expired or truncated target, a common delivery pattern for drainer lures
Domain age information unavailable

Details

Page Title

Constant Contact

Scan Type

public

Domain Name Analysis

Domain 'r20.rs6.net' uses the network infrastructure generic top-level domain (.net) with subdomain 'r20'. The core label 'rs6' covers 3 characters holding zero vowels versus 2 consonants, plus 1 digit. Word splitting yields two words: rs, 6. Median word length comes out to 1.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Oops! The requested page was not found. This could be because: + You followed a broken or out-of-date link. + Your email client cut off part of the URL of the link and we no longer recognize it. +...

Page Load Overview

5.94s
Total Load Time
255 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:50%
Script:Latin
Direction:ltr

Detection Details

Text Length:331 chars
Detector Agreement:100%

Website Classification

Primary Category

social media network26% confidence
Type: static
Method: ml+structural+ocr_tiebreaker

All Detected Categories

social media network
26%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3208.75.122.11United States
AS40444Constant Contact, Inc
165.8.131.56Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
165.8.131.64Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
53--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T163212E3A10E4511356D0C1C86A4A3316CEC2D527DDA3DEC1B4AC824CAFD9EC78C5318D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

24:kxeCsuPQF0FEoAtO9Ecb8ANRaiR6WnA7k/R+70b2AoHEemGo3j:dphxaEu56t4bTEe

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:1360:gAAAASAAAgAAAAIAAUABQCAgAAggAAAACIAAABABQBAAAACAACAAACASAAAAAAAAAAQgAAAAAAAAAAIIAQAAAAAEAAKAIABA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:003c3c24243c0000
Perceptual Hash:b322cc993366cc9b
Difference Hash:0028284c48280000
Wavelet Hash:dcfcfce42c3c0000
Color Hash:N/A

Other Hashes

Crop Resistant:0028284c48280000

Scan History

Scan history not available

Unable to load historical scan data