Why are click tracking links from my ESP being blocked as dangerous?
Summary
What email marketers say10Marketer opinions
Email marketer from EmailAnalysis.com warns that click tracking domains that don't align with your brand or sending domain can appear suspicious and lead to blocks.
Email marketer from StackExchange explains that URL reputation is a crucial factor. If the click tracking domain is new or has been associated with spam, security software might block it.
Email marketer from Email Marketing Forum points out that the age and history of the click tracking domain matter. A domain with a short history or a history of spam is more likely to be flagged.
Email marketer from Email Marketing Tips Blog warns that using cloaked redirects or URL shorteners for click tracking can be seen as suspicious and lead to blocks, as these techniques are often used in phishing attacks.
Email marketer from Email Deliverability Forum suggests ensuring that the click tracking domain uses HTTPS and has a valid SSL certificate. Lack of SSL can trigger warnings and blocks.
Email marketer from Reddit mentions that if the IP address of the server hosting the click tracking domain has a poor reputation (due to spam sent from other domains on the same server), security software might block the links.
Email marketer from ReputationDefender Blog suggests monitoring your brand's online reputation. If your brand is associated with spam or scams, click tracking links using your brand's domain might be affected.
Marketer from Email Geeks shares their team experienced similar issues with click tracking domains and suggests using online URL checkers for insights. They recommend submitting domains to security providers for re-evaluation and recategorization and includes a list of links.
Email marketer from EmailGeeks Blog mentions that using uncommon or newly registered top-level domains (TLDs) for click tracking can raise suspicion and increase the likelihood of being blocked.
Email marketer from Reddit suggests that if the ESP uses shared hosting for click tracking, a single user's malicious activity can negatively impact the reputation of the shared domain, leading to blocks for everyone.
What the experts say3Expert opinions
Expert from Word to the Wise highlights that using short link domains with poor reputations will negatively affect the deliverability of your email campaigns. This includes click tracking links utilizing those short link domains. She suggests avoiding URL shorteners altogether or using a reputable service.
Expert from Spam Resource emphasizes that a poor sender reputation, often stemming from spam complaints or being listed on blocklists, significantly impacts whether click tracking links are flagged as dangerous. He also advises that monitoring your sending reputation is crucial.
Expert from Email Geeks explains an issue where a compromised customer on an ESP click tracking domain led to all customers being blocked due to linking to a phishing site, and warns users to check if your security team has checked to ensure your website is not compromised.
What the documentation says5Technical articles
Documentation from Spamhaus explains that they maintain blocklists of domains and IPs associated with spam activity. If a click tracking domain is listed on a Spamhaus blocklist, it's likely to be blocked by security software.
Documentation from Palo Alto Networks explains that their URL filtering service categorizes URLs based on content and reputation. Incorrect or malicious categorization of a click tracking domain can lead to blocking.
Documentation from BrightCloud explains that they provide URL and IP reputation services. These services are used by security vendors to classify URLs. A poor BrightCloud reputation could cause blocking.
Documentation from NortonLifeLock explains that Norton flags websites based on various criteria, including malware detection, phishing attempts, and suspicious behavior. Click tracking links may be blocked if they trigger these flags.
Documentation from Google explains that Google Safe Browsing flags websites as unsafe if they host malware or engage in phishing. If a click tracking domain is flagged by Google, it will be blocked in various browsers and applications.