<?xml version="1.0" encoding="UTF-8" ?>
<?xml-stylesheet type="text/xsl" href="https://community.sophos.com/cfs-file/__key/system/syndication/rss.xsl" media="screen"?><rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:slash="http://purl.org/rss/1.0/modules/slash/" xmlns:wfw="http://wellformedweb.org/CommentAPI/"><channel><title>Mail sent but not showing as open</title><link>https://community.sophos.com/phish-threat/f/discussions/118611/mail-sent-but-not-showing-as-open</link><description>So I started a Phish Campaign, I sent out 5 different attachment mock ups to 12 random users to test things before sending a larger one. 
 
 I have two questions, 
 I set the campaign to 20% every 12 hours. It is coming up on 24 hours but only 3 emails</description><dc:language>en-US</dc:language><generator>Telligent Community 12</generator><item><title>RE: Mail sent but not showing as open</title><link>https://community.sophos.com/thread/430223?ContentTypeID=1</link><pubDate>Tue, 25 Feb 2020 21:33:40 GMT</pubDate><guid isPermaLink="false">4be5eb7d-caa4-4ff5-8e60-8f9463545a35:9d18d233-133b-498d-a61f-ce0b48019b6c</guid><dc:creator>Badrobot</dc:creator><description>&lt;p&gt;I see, that explains why it is not tracking.&amp;nbsp; We do not have auto&amp;nbsp;download of images enabled on external email.&lt;/p&gt;
&lt;p&gt;&amp;nbsp;&lt;/p&gt;
&lt;p&gt;Thanks!&lt;/p&gt;&lt;div style="clear:both;"&gt;&lt;/div&gt;</description></item><item><title>RE: Mail sent but not showing as open</title><link>https://community.sophos.com/thread/430110?ContentTypeID=1</link><pubDate>Mon, 24 Feb 2020 23:24:30 GMT</pubDate><guid isPermaLink="false">4be5eb7d-caa4-4ff5-8e60-8f9463545a35:c773c185-a9e4-4430-af2c-524317b39f74</guid><dc:creator>MEric</dc:creator><description>&lt;p&gt;Hi Badrobot,&lt;/p&gt;
&lt;p&gt;The additional 3 emails should have gone out.&amp;nbsp; You can raise a support ticket to trace these emails if they still aren&amp;#39;t sending.&lt;/p&gt;
&lt;p&gt;For your second question, let&amp;#39;s break down how Phish Threat actually tracks when emails have been opened.&amp;nbsp; Every phishing email contains a transparent 1 pixel image.&amp;nbsp; When this image is downloaded, it is then tracked and the email marked as opened.&amp;nbsp; If you have auto-download of images disabled this may cause tracking of emails to fail.&amp;nbsp; If you want to test this behavior, open up one of the campaign emails in plain-text and you should see the following:&lt;/p&gt;
&lt;p&gt;&amp;nbsp;&lt;br /&gt;{\*\htmltag0 }{\*\htmltag64}\htmlrtf {\htmlrtf0 {\*\htmltag84 &amp;lt;img alt=&amp;quot;&amp;quot; src=&amp;quot;&lt;strong&gt;jk3bt83s.r.eu-west-1.awstrack.me/I0/0102016e8fe0024c-ffe0b254-####-####-####-1ce96b20cb05-000000/6c8QWfJt0x4fzV6RuGtwW6p2PVw=137&lt;/strong&gt;&amp;quot; style=&amp;#39;display: none; width: 1px; height: 1px;&amp;#39;&amp;gt;}\htmlrtf {\field{\*\fldinst{HYPERLINK &amp;#39;jk3bt83s.r.eu-west-1.awstrack.me/=137&amp;quot;}}{\fldrslt\cf1\ul }}\htmlrtf0 &lt;br /&gt;I0/0102016e8fe0024c-ffe0b254-####-####-####-1ce96b20cb05-000000/6c8QWfJt0x4fzV6RuGtwW6p2PVw&lt;br /&gt;{\*\htmltag4 \par }{\*\htmltag72}\htmlrtf\par}\htmlrtf0&lt;/p&gt;
&lt;p&gt;&amp;nbsp;If this user has not yet opened the email according to Phish Threat, try copying the link and pasting it in a web browser.&amp;nbsp; Phish Threat should track that as an email opened as the link is custom to the user and campaign.&lt;br /&gt;&amp;nbsp;&lt;/p&gt;&lt;div style="clear:both;"&gt;&lt;/div&gt;</description></item></channel></rss>