Creating effective links

CampaignMonitor blogged today about an email they sent out that triggered the Thunderbird “this might be a scam” filter.

After a bit of tweaking, we discovered that Thunderbird systematically throws up this alert when it sees a URLs in your HTML email copy. In this case, we had made the mistake of adding the following line:
If you would like to support the National Wildlife Federation in protecting wildlife and their habitats, kindly donate at http://killspill.org/.

This isn’t just a Thunderbird filter, many of the spamfilters out there including those at the various webmail providers and those built into desktop email clients look at the same thing.
In some cases, they throw up a warning when the text in the <a href=””> tag is different from the visible text. For example:
<a href=”http://clickthroughlink.esp.domain.com”> http://killspill.org</a>
will trigger a warning in many email clients while
<a href=”http://killspill.org/”>http://killspill.org/</a>
won’t generate a warning.  But in some clients, including apparently Thunderbird, the link <a href=”http://killspill.org/”> http://killspill.org/</a> will cause a scam warning.
These warnings themselves are a good thing. Overall, there are a lot of phishers and scammers use mis-matching links to attempt to deceive recipients into clicking on http://spammersite.com/ because they think they’re visiting http://amazon.com/.

Related Posts

Spam lawsuits: new and old

There’s been a bit of court activity related to spam that others have written about and I feel need a mention. I’ve not yet read the papers fully, but hope to get a chance to fully digest them over the weekend.
First is e360 v. Spamhaus. This is the case that actually prompted me to start this blog and my first blog post analyzed the 7th circuit court ruling sending the case back the lower court to determine actual damages. The lower court ruled this week, lowering the judgment to $27,002 against Spamhaus. The judge ruled that there was actual tortuous interference on the part of Spamhaus. In my naive reading of the law, this strikes me as not only an incorrect ruling, but one that ignores previous court decisions affirming that blocklists are protected under Section 230. Venkat seems to agree with me.

Read More

10 ways spam is like Vuvuzelas

Amir Lev has a great post today detailing the 10 ways that spam is like Vuvuzelas. After reading his reasons (and deleting over 1000 messages from Cutwail), I absolutely agree.

Read More

Who's sharing data

Al has a post asking what people would do if their information was shared after opting out of any sharing.
It’s a tough call and one I think about as I see mail coming to my mailbox to such addresses as laura-sony and laura-quicken and laura-datran. All of these were addresses given to specific companies and where I attempted to opt-out of them sharing my data with other companies. Somewhere along the line, though, the addresses leaked and got into the hands of spammers.
Those addresses are overwhelmed with spams and scams. The frustrating part is there is no way to fix it. Once the addresses are leaked, they’re leaked. They will be receiving spam throughout eternity, even if the companies involved stop selling data or fix their data handling problem.
I don’t know what to do, honestly. If I think it was a one time thing, such as the addresses that started getting spam after the iContact data leak, then I’ll change my address at the vendor and retire the address the spammers have. But with other vendors, I don’t know what happened and I suspect the vendor doesn’t either, and so I can either deal with the spam or hope that I don’t lose real mail from that vendor.
There’s no easy answer. Any time you hand over an email address, or any other form of personal data, you’re trusting in the company, all of their employees and all of their vendors and partners to be honest and competent. This is often not the case.
What do you do?

Read More