Skip to main content
All CollectionsPHISHInitial setup
Reference guide: Details to allowlist PHISH
Reference guide: Details to allowlist PHISH

Details required to allow list PHISH

Robert Shough avatar
Written by Robert Shough
Updated over 3 months ago

Sending IPs & domains

To make sure our simulated phishing emails reach your users, you need to arrange for the following IP address and domain to be allowlisted in your mail servers (you may need your IT department to enable this):

May 31st 2024 onwards:

IP Address

Hostname

Embedded url

54.78.3.99

54.74.7.50

34.254.53.189

34.252.200.43

34.246.164.195

email.cs-mail-sender.com

l.cs-mail-sender.com

If you are using a mail filter, both your email solution and inbound gateway (filter) needs to be allowlisted.

For more information about further allowlisting, click here.

Note – the domains listed above are used in the “MailFrom” attribute as per RFC 5321, not in the “From” attribute as defined in RFC 5322. This ensures that even when the “From” address seen in the email does not match – which is the case for genuine phishing emails - the rule will still be applied.

DMARC, SPF & DKIM are configured to ensure PHISH is a secure simulation solution.

Expanded domains

Expanded domains offer an increase variety for simulations. Once allowlisted, you can enable it here.

If you'd like to use expanded domains please ensure you make the change here and test it, before confirming allowlisting.

Please note the DKIM signature from CybSafe phishing emails from the default hostnames listed above. DMARC and DKIM will always be valid. If you are using message headers for triage or routing, we suggest using the message ID which will always end with @app.cybsafe.com

domains

Hostname

Embedded url

1winnereveryday.com

1winnereveryday.com

l.1winnereveryday.com

avallonstyle.com

avallonstyle.com

l.avallonstyle.com

appdocusmart.com

appdocusmart.com

l.appdocusmart.com

bccgbilling.com

bccgbilling.com

l.bccgbilling.com

bellowhr.com

bellowhr.com

l.bellowhr.com

checkmatessocial.com

checkmatessocial.com

l.checkmatessocial.com

cine-pass.com

cine-pass.com

l.cine-pass.com

cloudforwards.com

cloudforwards.com

l.cloudforwards.com

companysurveysltd.com

companysurveysltd.com

l.companysurveysltd.com

copadebalon.com

copadebalon.com

l.copadebalon.com

cs-engagement.com

cs-engagement.com

l.cs-engagement.com

hottakesnews.com

hottakesnews.com

l.hottakesnews.com

internalsecuritycomms.com

internalsecuritycomms.com

l.internalsecuritycomms.com

fraud-alerts.com

fraud-alerts.com

l.fraud-alerts.com

ezcapitalcredit.com

ezcapitalcredit.com

l.ezcapitalcredit.com

eventogramltd.com

eventogramltd.com

l.eventogramltd.com

hr-ops-team.com

hr-ops-team.com

l.hr-ops-team.com

gold-vines.com

gold-vines.com

l.gold-vines.com

global-net-watchdog.com

global-net-watchdog.com

l.global-net-watchdog.com

holmeslegalltd.com

holmeslegalltd.com

l.holmeslegalltd.com

ct-caterers.com

ct-caterers.com

l.ct-caterers.com

datemedating.com

datemedating.com

l.datemedating.com

dailyquizwhizz.com

dailyquizwhizz.com

l.dailyquizwhizz.com

fastboxpostage.com

fastboxpostage.com

l.fastboxpostage.com

finance-ops-dept.com

finance-ops-dept.com

l.finance-ops-dept.com

feeldating.com

feeldating.com

l.feeldating.com

finance-ops-team.com

finance-ops-team.com

l.finance-ops-team.com

forummsocial.com

forummsocial.com

l.forummsocial.com

socialprivacyadmin.com

socialprivacyadmin.com

l.socialprivacyadmin.com

my-social-friends.com

my-social-friends.com

l.my-social-friends.com

pxlswitcher.com

pxlswitcher.com

l.pxlswitcher.com

ourtrees4life.com

ourtrees4life.com

l.ourtrees4life.com

myenergyupdates.com

myenergyupdates.com

l.myenergyupdates.com

secretsantaconnect.com

secretsantaconnect.com

l.secretsantaconnect.com

rewardscomms.com

rewardscomms.com

l.rewardscomms.com

overandoutsupport.com

overandoutsupport.com

l.overandoutsupport.com

x--cursion.com

x--cursion.com

l.x--cursion.com

tga-entertainment.com

tga-entertainment.com

l.tga-entertainment.com

sansonandsimmons.com

sansonandsimmons.com

l.sansonandsimmons.com

safer-park.com

safer-park.com

l.safer-park.com

sendmatevideo.com

sendmatevideo.com

l.sendmatevideo.com

translucenceinternational.com

translucenceinternational.com

l.translucenceinternational.com

pegasisdigitalsolutions.com

pegasisdigitalsolutions.com

l.pegasisdigitalsolutions.com

tech-testers.com

tech-testers.com

l.tech-testers.com

socialpicstoday.com

socialpicstoday.com

l.socialpicstoday.com

lghomewares.com

lghomewares.com

l.lghomewares.com

threehappygardeners.com

threehappygardeners.com

l.threehappygardeners.com

paymeeapp.com

paymeeapp.com

l.paymeeapp.com

secure-mail4you.com

secure-mail4you.com

l.secure-mail4you.com

simplystationry.com

simplystationry.com

l.simplystationry.com

my-drive.social

my-drive.social

l.my-drive.social

share-my.photos

share-my.photos

l.share-my.photos

intranet-corp.net

intranet-corp.net

l.intranet-corp.net

zensationaladmin.com

zensationaladmin.com

l.zensationaladmin.com

Did this answer your question?