These corporate phishing test emails come from phishd and similar services. Very easy to fingerprint them with smtp headers and set up mail rules to bounce them to your corporate phishing sink...