[throwaway3849]

For phishing test links that contain identifiable query parameters, it's easy enough to write a quick script which finds those emails and moves them into the "phishing tests" folder. For those operating in a system which proxies email links, just not checking email is a valid alternative. Just treat the whole well as poisoned.