When a learner reports a phishing email use the defanged version of the email as a way to test other users in the organization on phishing. This is useful because they are the types of emails the organization is already seeing.