Depending on your environment, you may need to update your mail gateway allow lists with the MetaCompliance-dedicated IP addresses and/or domains to ensure users can successfully receive the simulated phishing and/or notification emails. (Notification emails can include Course invitation emails, password reset emails, registration emails etc.)

The following IP address range can be used in combination with mail header, mail from domains or DKIM signing domain to build a secure condition for allowing mail.

AWS SES/EC2

1. European Data Centre – Ireland/Netherlands

2. Germany Data Centre

3. UK Data Centre

4. Canadian Data Centre

Note – All mail is DKIM, signed by both 'amazonses.com' or 'spm.metacompliance.com' and a signature of the 'mail from' domain. For example, a simulated phish from no-reply@1rs-us.com, will have DKIM signatures of d=1rs-us.com and d=spm.metacompliance.com.

Important - The below service (Twilio/SendGrid) will be deprecated for simulated phishing emails on Saturday 15^th July, 2023.

• In preparation for this, and to ensure all simulated phishing emails continue as normal, we recommend that all customers now also whitelist the AWS EC2 IP/Domain information (as above).
• We also recommend that you retain the Twilio/SendGrid Allowlisting information as you may still use this service to send notification emails, unless you have officially switched to AWS with our Support team.

Twilio/ SendGrid

The following dedicated IPs can be trusted in confidence, as only MetaCompliance can send emails from them:

• 168.245.49.92
• 167.89.62.239
• Allow bulk delivery from the IPs listed above.

After Saturday 15^th July, 2023, this service will be used for notification emails only. For simulated phishing emails, please apply the relevant AWS EC2 settings.

Note – Customer Support will be able to tell you which Mail Service your account is using and which data centre your tenant is located in.

Branding

a. Links

MetaCompliance brands phish URLs and landing pages based on the selected phishing template. Links within the phish template will be branded as below:

• Dublin - https://links-ire.domainname
• NL - https://links-nl.domainname
• UK - https://links-uk.domainname
• Canada - https://links-can.domainname
• Germany - https://links-dach.domainname

b. Landing Page

Custom Domain - No Form:

Expected Result with clicked on Phish:

Take the User to the Learning Experience

URL should be https://cloud.metacompliance.com/View/Link

Default Domain - No Form:

Expected Result with clicked on Phish:

Take the User to the Learning Experience

URL should be https://cloud.metacompliance.com/View/Link

Custom Domain - Form:

Expected Result with clicked on Phish:

Take the User to the Form Data (Landing page)

URL should be https://landing.helpdesk-mailbox.com/View/Link

Accept Form Data

Brought to Learning Experience

URL should be https://cloud.metacompliance.com/View/Link

Default Domain - Form:

Expected Result with clicked on Phish:

Take the User to the Form Data (Landing page)

URL should be https://landing.shopping-offers.biz/View/Link

Accept Form Data

Brought to Learning Experience

URL should be https://cloud.metacompliance.com/View/Link

Please find below all domains available for use within the MetaPhish module: