Jake, please move this one back to ‘Unsolved’. It’s definitely still an active unresolved issue.
Here’s a really reliable methodology to identify domains using security software that actively and routinely clicks links:
- Any domain that (in a single email):
- Gets more than 1 click
- And whose CTR is higher than 50%
- Bonus points if you see that all of the clicks from the domain come within a few minutes of each other.
Please give us the option to filter out this activity. This week my email clicks were inflated to 3x reality because of this. I’ve just stopped emailing people who work for companies with this type of security parameter. But this week 3 new ones started doing it.