@laurengoode this is such a great example of how the (relatively minor) technical details of implementation leak through & affect regular users. Most code libraries treat the URL fragment (the part after the #) as completely distinct from the rest of an address, but spammers are often not conventional coders, so they don’t have the same assumptions about how a computer scientist looks at this data type. The surface area of vulnerability arises because of the cultural difference.