Click tracking served through owned redirect domain
Why it matters
Shared ESP tracking domains like click.sendgrid.net and email.mailgun.net pool their reputation across every tenant on the platform, so one spammer's blasts drag your click-throughs into spam folders and Safe Browsing warnings. Owned redirect subdomains tie click reputation to your sending domain, keep DKIM/SPF alignment intact, survive ESP migrations without breaking historical links, and stop Gmail and Outlook from flagging third-party hostnames as phishing redirects in the user's browser.
Severity rationale
High because a poisoned shared tracking domain suppresses deliverability and click-through across every campaign until migration completes.
Remediation
Register a subdomain such as clicks.yourdomain.com or track.yourdomain.com, configure it as a custom link-branding domain inside your ESP (SendGrid Sender Authentication, Mailgun Sending Domains, or Resend custom domains), point the required CNAMEs at the ESP, then route every outbound link through a single buildTrackedUrl() helper so no campaign falls back to the shared default.
return `https://clicks.yourdomain.com/r?${params.toString()}`
DetectionPro
The detection method for this pattern is part of AuditBuffet Pro.
The full method (what to look for, pass and fail conditions, and how results get reported) ships inside the Campaign Analytics & Attribution Audit. The pattern definition, severity rationale, and remediation remain openly licensed under CC-BY-4.0.
Taxons
History
- 2026-04-18·v1.0.0·Initial import from campaign-analytics-attribution·automated