They could probably up the difficulty of the phishing tests. At my place of work, we use KnowBe4 and if you hover over the link on low-medium difficulty it will show up as from KnowBe4. But on the two higher difficulties you can pick any domain you want.