Is fihwr9hbb.cc.rs6.net legit or a scam?
Legitimate Constant Contact click-tracking redirect; parent infrastructure occasionally abused by phishers but the domain itself is not malicious.
Analysis Summary
No threats detected
All checks passed. This site appears legitimate — but always stay alert for phishing even on trusted domains.
Website Preview
Automated page render — captured in a safe sandbox. What an ordinary visitor would see when loading the site.
MT Intelligence
The domain fihwr9hbb.cc.rs6.net is part of Constant Contact's official email-tracking infrastructure, confirmed by business registration data and the company's own documentation. The subdomain follows the exact naming convention (randomstring.cc.rs6.net) that Constant Contact uses for embedding links in customer email campaigns to track opens and clicks. Our antivirus network and browser blocklists show no flags, and the SSL certificate is valid and current. The evidence package confirms that while bad actors have exploited compromised Constant Contact accounts to send phishing emails through rs6.net redirects, this specific subdomain has no independent mentions in scam reports or malware databases. The domain's age of 8938 days aligns with Constant Contact's long-term operation. The page itself displays the expected Constant Contact landing message explaining the tracking function.
Web Research Findings
Our live research agent queries scam-report databases, consumer-review sites, news coverage, and general web search for fihwr9hbb.cc.rs6.net, then cross-checks business-registration records and look-alike domain patterns. Everything below is pulled from what it actually found.
- fihwr9hbb.cc.rs6.net follows the exact naming convention used by Constant Contact for click-tracking redirects in marketing emails (e.g. similar to z4jeubsab.cc.rs6.net, r20.rs6.net).
- rs6.net is officially owned and used by Constant Contact, Inc. for embedding links in customer email campaigns to track opens, clicks, and engagement.
- Multiple reports document bad actors abusing compromised or poorly vetted Constant Contact accounts to send phishing emails that route through rs6.net subdomains.
- Cybersecurity professionals have noted a significant uptick in phishing campaigns leveraging rs6.net redirects, leading some organizations to consider blocking the domain.
- The specific subdomain fihwr9hbb.cc.rs6.net has no independent mentions in public scam reports, reviews, or malware databases beyond the general pattern of the parent infrastructure.
- Domain age of 8938 days aligns with long-term operation of Constant Contact's tracking infrastructure.
- Page title "Constant Contact" is consistent with how their tracking redirects present.
- Constant Contact Communityopen
"huge uptick in bad actors abusing Constant Contact for phishing... many users are clicking on malicious phishing links using rs6.net redirects"
- Reddit r/sysadminopen
"Click Tracking site rs20.rs6.net hosting phishing links... It's owned by constant contact, and we've seen a number of phishing campaigns use it as a launch pad."
- Google Supportopen
"The redirection of email links in Gmail through z4jeubsab.cc.rs6.net is typically due to link tracking by Constant Contact, an email marketing platform."
- Netifyopen
"cc.rs6.net is associated with the Constant Contact application."
- rs6.net officialopen
"This domain is used by r20.rs6.net as the root domain for certain links embedded in email campaigns sent on behalf of our customers."
rs6.net and cc.rs6.net are operated by Constant Contact, Inc. for email link tracking and click analytics
Our research found 2 scam-related mentions and 3 positive references. The scam mentions describe phishing campaigns that route through rs6.net subdomains, but these are cases where bad actors compromised Constant Contact customer accounts to send malicious emails — not evidence that the tracking infrastructure itself is malicious. Google Support and Netify both confirm that cc.rs6.net subdomains are part of Constant Contact's legitimate email-tracking service. Constant Contact's official rs6.net documentation states the domain is used for embedding links in customer email campaigns to track opens and clicks. The specific subdomain fihwr9hbb.cc.rs6.net has no independent scam reports or complaints.
Antivirus Engines
Security Scans
Checked against the major public blocklists used by browsers and security tools — no hits.
Contact Verification
We fetched the page and looked for real-world contact details. Legitimate businesses almost always publish an email on their own domain, a phone number, and a postal address. Scam shops usually don't.
- No contact email found anywhere on the page.
- No phone number listed on the page.
- No postal address visible on the page.
Domain & Encryption
Server Reputation
Still, stay alert
No major threat indicators — but a clean scan does not guarantee every page is safe, and phishing emails routinely spoof real domains.
- Double-check the exact URL in your address bar
Confirm you are actually on fihwr9hbb.cc.rs6.net and not a lookalike like f-ihwr9hbb.cc.rs6.net.com or an IDN homoglyph.
- Use a password manager
Password managers only auto-fill on the exact domain they were saved for — they refuse to fill lookalike domains, which is the single best phishing defence.
- OpenDiscuss this site on the forum
If you have first-hand experience with this site — good or bad — share it with the MalwareTips community.
Reputation Sources
How this domain rates across independent threat-intelligence and blocklist providers.
Referenced Domains
Outbound domains this page links to or loads resources from. Each links to its own security scan.
Safety FAQ
Common questions about this site, answered directly from the scan data above — so the answers always reflect the latest verdict on this page.
- Our automated security review found no threat indicators on fihwr9hbb.cc.rs6.net. The site appears legitimate based on the signals we checked, but always stay alert for phishing emails that spoof real domains.
- fihwr9hbb.cc.rs6.net passed our automated security checks with a trust score of 84/100. No antivirus engines or major blacklists flagged the site at the time of the last scan.
- Yes. fihwr9hbb.cc.rs6.net presents a valid TLSv1.2 certificate issued by GlobalSign nv-sa · GlobalSign Atlas ECCR5 OV TLS CA 2026 Q1, expiring in 108 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.
- fihwr9hbb.cc.rs6.net is 24.5 years old, registered on 12/21/2001 through MarkMonitor Inc.. Scam domains are often freshly registered — a site under 6 months old warrants extra caution.
- No. All 0 antivirus engines in our malware network report fihwr9hbb.cc.rs6.net as clean.
- No. fihwr9hbb.cc.rs6.net is not currently listed on the major browser blocklist feeds that modern browsers use.
- fihwr9hbb.cc.rs6.net resolves to an IP operated by Constant Contact, Inc in US (usage type: Commercial). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.
- This is a permanent record of the scan run on June 11, 2026. The verdict and evidence above reflect that scan and do not change on their own. If circumstances around fihwr9hbb.cc.rs6.net have changed, MalwareTips staff can run a fresh scan, which re-runs every check from scratch and publishes an updated report.
User reviews & comments(0)
Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.