Security issue

Occasional Participant

Security issue

Received this from a reader: Dangerous Website Blocked You attempted to access: http://r20.rs6.net/tn.jsp?f=001jpsYcmt7xaSTlOk7H2KKaDiBU4HGxFAd-PFkfjN91MF_PdtYI9fyZhTylUak_3iPV_uHH... There was of course more, a big red X and all sorts of other off-putting stuff. I then checked out all the other “more” links and was presented with the same page. Clearly there is some problem, I don’t know whether it is with Norton, or the intervening sites that collect advertising/statistical data as you are diverted to other sites. I don’t know whether the problem is unique to me, but thought I should let you know about it.

Top Answer
Kyle_R
Administrator

Hello all,

 

We apologize for not following up on this thread correctly to provide updates on some of the various issues people have been running into. I'd like to clarify a few things and try to help anyone still needing it as there are several different issues rolling up in this topic:

 

This isn't an issue that's been persisting since 2017 that we've been ignoring. For some background, we have a Compliance team that are proactively monitoring activity around the clock in order to catch problematic accounts/emails before they cause any issues. This is something we take very seriously, as it helps ensure our emails land in the inbox which is of crucial importance. Despite those efforts, from time to time we may end up on a block list for a specific security software program or ISP for a variety of reasons. It definitely comes with the territory. When this happens, we have an ISP Relations team that works with these companies to mediate a solution. Norton being one example that was original mentioned and mentioned again recently. To be clear, these were two separate incidents. The issue is now resolved, and in the most recent incident it was resolved within a day or two. We're not currently on any major block lists that we're aware of for any anti-virus software programs. If you're seeing something now, then we definitely need to look into it. In the interest of getting information on the latest occurrence, we may ask some questions that have been repeated throughout that thread such as what the error is saying, what security programs are being used, screenshots of the error, and we may recommend whitelisting in order to get you on our way while we look into it, or as a troubleshooting step to ensure that is the software that is blocking access. 

 

That being said, there is a second issue that has been brought up in this thread recently which is the browser plugin uBlock Origin blocking clicked links. This is different than normal anti-virus security software in that the point of the plugin is to block ads or any server meant to track user behavior. Links in a Constant Contact email go through the r20.rs6.net URL in order to be recorded as a "click" in your campaign reporting. In that sense, the domain is used to track behavior and is blocked accordingly through uBlock origin. They aren't likely to change their policy globally to allow our domain to continue to track clicks, so it's left up to each individual using the plugin to choose whether or not they want to remove the block to individual sites. This speaks to a growing shift in the market where users want more transparency into their data and how they are being tracked.

 

@SophiaL37  - Based on information from your recent support interaction, your issue seems separate from both the Norton and uBlock experiences I mentioned above. Because of this I'd like to address you more specifically. The message you're receiving is a general connectivity error so it's not completely clear yet if it's stemming from any particular security software (in many cases these errors come from the software program itself and not just the Chrome error message). In order to get to the bottom of this for you we've submitted a case to our advanced level of support on your behalf. We're curious to get some more information on the workaround regarding creating new templates. As for your point about redirecting, the r20.rs6.net domain is meant to redirect to the link address. This is done in order to track as a click, this isn't a virus. Though a member of our advanced level support team will follow-up with you directly on this, I will be keeping an eye on your case as well.


55 REPLIES 55

Hi @MartinaM9 

 

I'm sorry to hear this is happening in your email as well. What is the URL string you are seeing be affected? Do you have any spam filters, security programs, or firewalls being used? Please send these details to social_support(at)constantcontact(dot)com along with the name of this campaign, an email address of a contact who experience this, your ISP, and email client.


Frankie.P
Community & Social Media Support

Did I answer your question? If so, please mark my post as an "Accepted Solution" by clicking the Accept as Solution button in the bottom right hand corner of this post.

You're not alone on your email marketing journey. Connect with a Marketing Advisor to see how they can help you develop the right strategy for your business and get the most out of your Constant Contact experience.
Health Practitioners & Centers

This is actully your Chrome ad blocker extension (uBlock Origin) blocking the link. If you disable the Ublock extension your links will work. 

Occasional Participant

Hello, 

We have same problem in our company. I prepared an newsletter for large group of auditons.

I sent a test e-mail but all links blocked by UBlock Origin. This is an chrome extension. Your solution is to disable extension but it's not acceptable. I can to it easily but what if our customer want to be safe and do not trust that link and do not disable extension ?

CC must be find urgent solution for this issue Screenshot_1.jpg

Hi @YavuzU 

 

Thank you for sharing these details here in the Community. I apologize at this time we do not have a workaround for this. However we are aware of this extension blocking our links. We have also tracked this information in your account as we are continuing to troubleshoot this experience.


Frankie.P
Community & Social Media Support

Did I answer your question? If so, please mark my post as an "Accepted Solution" by clicking the Accept as Solution button in the bottom right hand corner of this post.

You're not alone on your email marketing journey. Connect with a Marketing Advisor to see how they can help you develop the right strategy for your business and get the most out of your Constant Contact experience.


@Frankie_P wrote:

We have also seen users use the View As Webpage version, as the web-page version will have the correct link.

No, that is correct ONLY after the user has navigated to the webpage which won't work if that webpage uses the r20.rs6.net domain. It also won't work in plain-text unless the "view as webpage" link is inserted as a visible URL - not everyone supports HTML emails. The only way to guarantee 100% of every recipient can read your message is to include a plain-text portion with visible URLs (links you can actually see the web address of where they go).

Hi @R.R7 

 

This is great feedback to help us understand exactly what you are trying to do. I apologize the View As Webpage version is not available in plain text emails.  In the meantime we have submitted this as a feature request in your account to the appropriate teams.


Frankie.P
Community & Social Media Support

Did I answer your question? If so, please mark my post as an "Accepted Solution" by clicking the Accept as Solution button in the bottom right hand corner of this post.

You're not alone on your email marketing journey. Connect with a Marketing Advisor to see how they can help you develop the right strategy for your business and get the most out of your Constant Contact experience.

Hi there, I tried reporting this in chat but got disconnected as I left for a meeting.

 

We sent out an email with a ticket link and several clients from several different ISPs reported not being able to connect to the site. When sending the original link (not rs6.net) it worked perfectly.

 

The error message they received is as follows:

 

This site can’t be reached

r20.rs6.net’s server IP address could not be found.

ERR_NAME_NOT_RESOLVED

 

Can you please look into this and tell me if this is going to keep happening or if there are any known solutions? We want to be able to sell via email. Thank you.

Hi @MarquisWines 

 

We're so sorry to hear this is happening with your contacts! After further troubleshooting our upper level of support was able to confirm this is usually caused by some security programs. What security program are these contacts using? Are they reading your emails on a home or work network? Because of this we suggest having these contacts whitelist Constant Contact URLs in their security software.


Frankie.P
Community & Social Media Support

Did I answer your question? If so, please mark my post as an "Accepted Solution" by clicking the Accept as Solution button in the bottom right hand corner of this post.

You're not alone on your email marketing journey. Connect with a Marketing Advisor to see how they can help you develop the right strategy for your business and get the most out of your Constant Contact experience.

Thank you for your reply. I have confirmed that one client has strict firewalls and security apps running, although the second client mentioned he also tried on his mobile device which has no software so we are no closer to a solution here. Is it possible that this server is being blocked upstream?

We literally have hundreds of contacts that are being affected by this. It's unacceptable. After months of trying to get help from CC on this nothing has been resolved. Essentially our emails to our followers have been rendered ineffective by the r20.rs problem where the links do not work. 

 

Hi @KimberlyP8 

 

We see you have previously worked with our upper level of support on this. You mentioned to this team this experience appears to be an isolated incident involving only a few email recipients. In fact, the link was resolved for the contact you did further troubleshooting on. If you are however still having this experience we would like to collect a few more details and continue looking into this for you. For instance are your contacts seeing any errors? If so what errors? Does this happen on a home or company network? What security programs are the contacts using? Having of these details allows us to make sure we don’t repeat the same troubleshooting steps as last time.

Frankie.P
Community & Social Media Support

Did I answer your question? If so, please mark my post as an "Accepted Solution" by clicking the Accept as Solution button in the bottom right hand corner of this post.

You're not alone on your email marketing journey. Connect with a Marketing Advisor to see how they can help you develop the right strategy for your business and get the most out of your Constant Contact experience.

Hi @MarquisWines 

 

Thank you for giving us this update! Whitelisting Constant Contact tends to be the solution needed for clients with strict firewalls and security apps. As for your other client, if it’s on a mobile device it could be a network issues causing the link to be blocked by mobile data.


Frankie.P
Community & Social Media Support

Did I answer your question? If so, please mark my post as an "Accepted Solution" by clicking the Accept as Solution button in the bottom right hand corner of this post.

You're not alone on your email marketing journey. Connect with a Marketing Advisor to see how they can help you develop the right strategy for your business and get the most out of your Constant Contact experience.

It doesn't seem like I'm the only one experiencing problems with rs6.net links. While I concede that security programs such as anti-virus programs and firewalls may contribute to this issue, it's disappointing that customers need to perform several actions to make Constant Contact work for them.

 

Two things suggested by CC support in this thread:

 

1. Adding Constant Contact to whitelists <-- not all users have the access or the knowledge to be able to do this on their work networks.

 

2. Sending the name of the firewall and antivirus programs to Constant Contact support <-- This is onerous for your clients as well as ours. Despite all the CC users sending this information to CC, what steps have been taken to contact those security vendors to have CC added to their whitelist so this does not happen in the future? In other words, if the next Norton update still blocks your emails, what is the purpose of sending this information to CC support staff?

 

Occasional Participant

I'm also getting emails from my subscribers complaining that UBlock Origin is preventing them from clicking on my links. It appears that rs6.net is on their "block" list. This MUST be rectified, or I'm going to have to switch to a new service. I can't have my readers unable to click links, this is vital.

Hello KevinR042,

Our technicians are aware of the situation with UBlock Origin and are working on a solution. The reader can also disable blocking for rs6.net and/or r20.rs6.net in uBlock Origin settings.
https://www.screencast.com/t/G6HcpRySG


Timothy_G
Community & Social Media Support

Did I answer your question? If so, please mark my post as an "Accepted Solution" by clicking the Accept as Solution button in the bottom right hand corner of this post.

You're not alone on your email marketing journey. Connect with a Marketing Advisor to see how they can help you develop the right strategy for your business and get the most out of your Constant Contact experience.
Regular Participant

This problem was brought to your attention in 2017 and it is still happening.  I have 2000 on my mailing list and can't request them all to white list.  Can't you work something out with Norton to fix this issue?

Hi.

I am still having this issue (2019, but I was not the original poster) with my own, as well as some client's email. I do not have Norton. The only program I use is McAfee and I don't have any capability within it to add these addresses to a white list.

  • constantcontact.com
  • r20.rs6.net
  • rs6.net
  • s3.amazon.com
  • files.ctctcdn.com
  • files.constantcontact.com

This is only a recent issue (the last month). I've been using your software for YEARS. I reached out on twitter and was told the following:

 

At least I have an answer for you. It does appear to be your security program that is causing the issue. But you can tell the security program that content from Constant Contact is okay through a process we call whitelisting.

Here are the instructions and the Constant Contact URLs to whitelist,  which includes the
http://r20.rs6.net that you have seen.

https://knowledgebase.constantcontact.com/articles/KnowledgeBase/5800-whitelisting-constant-contact-...

 

This was on October 14th. 

Please help. I cannot access any links or videos in the newsletters I release. I release a newsletter every day.

 

Thanks.

Hello @SophiaL37,

 

I apologize that you are having the same experience with your contacts. If you are unable to have them white list I do recommend giving our Deliverability team a call as they will be able to provide you with more information and advice on this issue. Thank you! 


Zoe H.
Community & Social Media Support

Did I answer your question? If so, please mark my post as an "Accepted Solution" by clicking the Accept as Solution button in the bottom right hand corner of this post.

You're not alone on your email marketing journey. Connect with a Marketing Advisor to see how they can help you develop the right strategy for your business and get the most out of your Constant Contact experience.
Occasional Participant

I received this email from a subscriber this morning: "I wanted to tell you that every time I tried to click on a link in the email to go to the webpage, my Norton freaked out and told me it was dangerous to go to the site, so it was blocked. I tried this on a bunch of different links in the email of the newsletter and finally just went to your main site and found all the links there and those worked just fine without a warning. So it was just the email links with the dangerous warning. I’m not sure what’s going on, but I wanted you to know."

 

It seems like Norton is blocking Constant Contact links. The subscriber said she had no problem visiting the links on our actual website, but the ones in the email were flagged as dangerous. I see that this problem has been going on for several years now. What is Contact Contact doing about this issue? 

 

I saw your "solutions" about adding exceptions to Norton, and that's not realistic. I can't tell thousands of people to do that every time we send an email. Has Constant Contact reached out to Norton and tried to fix this? This is a reason to switch to another email provider that doesn't have this issue.

Hi @AllenS5  and @AngelaM9 

 

I apologize you both are having this experience with our tracking links as well. It's important to mention our Support is also working with Norton to resolve this. Whitelisting Constant Contact is only a workaround we suggest in the meantime. We have also seen users who have contacted Norton directly as well and listed our redirect link as safe through their support.


Frankie.P
Community & Social Media Support

Did I answer your question? If so, please mark my post as an "Accepted Solution" by clicking the Accept as Solution button in the bottom right hand corner of this post.

You're not alone on your email marketing journey. Connect with a Marketing Advisor to see how they can help you develop the right strategy for your business and get the most out of your Constant Contact experience.
Regular Participant

PiHole also blocks your rs6.net links, Constant Contact. It seems the domain has likely gotten on one of the blocking lists, used for many any-malware and anti-ad products.