> Could be a redirect from a regular URL: Gmail -> Attacker's website -> data:text/html Sure, I agree it's a game of cat and mouse. But GMail's spam filter in

> Could be a redirect from a regular URL: Gmail -> Attacker's website -> data:text/html Sure, I agree it's a game of cat and mouse. But GMail's spam filter in my experience is pretty good, so if Google started flagging these messages as spam based on the link contents/website it would help reduce the success rate.