... you refused to proceed because your staff 'is not allowed to open links' - strange thing is the IT security sometimes guys...
That is the No 1 rule in the security implementation to prevent hacking (Phishing - link manipulation) by many companies that have security policies enacted.