> Years and years of “don’t click on suspicious links” out the window because bank.example.com/creditcard is turned into 4828fjfneo848.totallyfine.adtracker.thi

> Years and years of “don’t click on suspicious links” out the window because bank.example.com/creditcard is turned into 4828fjfneo848.totallyfine.adtracker.thirdparty.example.org I got an email from my bank (Barclays) a couple of months ago that literally took me several minutes to determine whether or not it was a phishing email. It wasn't, but it used badly compressed jpegs for the Barclays logo and the call-to-action button, the link attached to the button had no verifiable connection to Barclays, and for some reason it used backticks instead of apostrophes in the copy. When I finally did click the link I was half expecting to be taken to a page saying "you moron, this is obviously a scam" in 96pt font.