They follow the same format and structure (pattern of characters groups) as our correct tracking codes send via an internal email server. But appear to have a very simple character substitution applied b=a, t=g, e=f, m=z etc
All instances are from desktops and versions of chrome browsers.
Does anybody know of a Chrome extension which can encode querystring values in this way? or any other possible cause of this?