Our company occasionally does "test phishes" to see how well people resist them. Every time, some of our most security minded engineers end up on the "clicked o

Our company occasionally does "test phishes" to see how well people resist them. Every time, some of our most security minded engineers end up on the "clicked on the malicious link" lists, when all they did was forward the message to IT to report the phish. I'm wondering if the bingbot leak is the reason.