Same, script blocker, virtual machine, etc. Found that apparently you are not meant to forward/report the scam to IT either.

Moral of story: Never inform the company of any suspicious behavior; just ignore it.