You've got secure connection (https://) set for the onclick event, regular http connection for the href parameter. The real link is the secure one, so I'm guessing that maybe the click in the email is actually trying to hit through a tracking-decorated unsecured link and something is going wonky from there...