Sending IPs & domains
To make sure our simulated phishing emails reach your users, you need to arrange for the following IP address and domain to be allowlisted in your mail servers (you may need your IT department to enable this):
Until June 20th 2024
IP Address | Hostname | Embedded url |
167.89.33.127 | em.cs-mail-sender.com |
After May 31st 2024 onwards:
IP Address | Hostname | Embedded url |
54.78.3.99 54.74.7.50 34.254.53.189 34.252.200.43 34.246.164.195 | email.cs-mail-sender.com | l.cs-mail-sender.com
|
If you are using a mail filter, both your email solution and inbound gateway (filter) needs to be allowlisted.
For more information about further allowlisting, click here.
Note – the domains listed above are used in the “MailFrom” attribute as per RFC 5321, not in the “From” attribute as defined in RFC 5322. This ensures that even when the “From” address seen in the email does not match – which is the case for genuine phishing emails - the rule will still be applied.
DMARC, SPF & DKIM are configured to ensure PHISH is a secure simulation solution.
Expanded domains
Expanded domains offer an increase variety for simulations. Once allowlisted, you can enable it here.
If you'd like to upgrade to expanded domains as part of the May/Jun PHISH allowlisting changes, please ensure you make the change here and test it, before confirming the new allowlisting.
Please note the DKIM signature from CybSafe phishing emails from the default hostnames listed above. DMARC and DKIM will always be valid. If you are using message headers for triage or routing, we suggest using the message ID which will always end with @app.cybsafe.com
domains | Hostname | Embedded url |
1winnereveryday.com | 1winnereveryday.com | l.1winnereveryday.com |
avallonstyle.com | avallonstyle.com | l.avallonstyle.com |
appdocusmart.com | appdocusmart.com | l.appdocusmart.com |
bccgbilling.com | bccgbilling.com | l.bccgbilling.com |
bellowhr.com | bellowhr.com | l.bellowhr.com |
checkmatessocial.com | checkmatessocial.com | l.checkmatessocial.com |
cine-pass.com | cine-pass.com | l.cine-pass.com |
cloudforwards.com | cloudforwards.com | l.cloudforwards.com |
companysurveysltd.com | companysurveysltd.com | l.companysurveysltd.com |
copadebalon.com | copadebalon.com | l.copadebalon.com |
cs-engagement.com | cs-engagement.com | l.cs-engagement.com |
hottakesnews.com | hottakesnews.com | l.hottakesnews.com |
internalsecuritycomms.com | internalsecuritycomms.com | l.internalsecuritycomms.com |
fraud-alerts.com | fraud-alerts.com | l.fraud-alerts.com |
ezcapitalcredit.com | ezcapitalcredit.com | l.ezcapitalcredit.com |
eventogramltd.com | eventogramltd.com | l.eventogramltd.com |
hr-ops-team.com | hr-ops-team.com | l.hr-ops-team.com |
gold-vines.com | gold-vines.com | l.gold-vines.com |
global-net-watchdog.com | global-net-watchdog.com | l.global-net-watchdog.com |
holmeslegalltd.com | holmeslegalltd.com | l.holmeslegalltd.com |
ct-caterers.com | ct-caterers.com | l.ct-caterers.com |
datemedating.com | datemedating.com | l.datemedating.com |
dailyquizwhizz.com | dailyquizwhizz.com | l.dailyquizwhizz.com |
fastboxpostage.com | fastboxpostage.com | l.fastboxpostage.com |
finance-ops-dept.com | finance-ops-dept.com | l.finance-ops-dept.com |
feeldating.com | feeldating.com | l.feeldating.com |
finance-ops-team.com | finance-ops-team.com | l.finance-ops-team.com |
forummsocial.com | forummsocial.com | l.forummsocial.com |
socialprivacyadmin.com | socialprivacyadmin.com | l.socialprivacyadmin.com |
my-social-friends.com | my-social-friends.com | l.my-social-friends.com |
pxlswitcher.com | pxlswitcher.com | l.pxlswitcher.com |
ourtrees4life.com | ourtrees4life.com | l.ourtrees4life.com |
myenergyupdates.com | myenergyupdates.com | l.myenergyupdates.com |
secretsantaconnect.com | secretsantaconnect.com | l.secretsantaconnect.com |
rewardscomms.com | rewardscomms.com | l.rewardscomms.com |
overandoutsupport.com | overandoutsupport.com | l.overandoutsupport.com |
x--cursion.com | x--cursion.com | l.x--cursion.com |
tga-entertainment.com | tga-entertainment.com | l.tga-entertainment.com |
sansonandsimmons.com | sansonandsimmons.com | l.sansonandsimmons.com |
safer-park.com | safer-park.com | l.safer-park.com |
sendmatevideo.com | sendmatevideo.com | l.sendmatevideo.com |
translucenceinternational.com | translucenceinternational.com | l.translucenceinternational.com |
pegasisdigitalsolutions.com | pegasisdigitalsolutions.com | l.pegasisdigitalsolutions.com |
tech-testers.com | tech-testers.com | l.tech-testers.com |
socialpicstoday.com | socialpicstoday.com | l.socialpicstoday.com |
lghomewares.com | lghomewares.com | l.lghomewares.com |
threehappygardeners.com | threehappygardeners.com | l.threehappygardeners.com |
paymeeapp.com | paymeeapp.com | l.paymeeapp.com |
secure-mail4you.com | secure-mail4you.com | l.secure-mail4you.com |
simplystationry.com | simplystationry.com | l.simplystationry.com |
my-drive.social | my-drive.social | l.my-drive.social |
share-my.photos | share-my.photos | l.share-my.photos |
intranet-corp.net | intranet-corp.net | l.intranet-corp.net |
zensationaladmin.com | zensationaladmin.com | l.zensationaladmin.com |