Sorry. What I said is incomplete and slightly misleading. To clarify . . .
This works and tracking is applied:
{{my.URLToken}} = domain.com/?utm_campaign=test
<a href="https://{{my.URLWithUTMs}}" target="_blank">
<img src="https://go.dnsfilter.com/rs/XXX-XXX-XXX/images/image.png" />
</a>
This works, but no tracking is applied:
{{my.URLToken}} = https://domain.com/?utm_campaign=test
<a href="{{my.URLWithUTMs}}" target="_blank">
<img src="https://go.dnsfilter.com/rs/XXX-XXX-XXX/images/image.png" />
</a>
I recognize the documentation says to do it the first way. Not a bug, but it is a little confusing and a very easy mistake to make.
Right... the rewriter looks at the raw <a> tag first to see if it appears to be a remote URL, so the protocol needs to be outside the token.