Depending on your environment, you may need to update your mail gateway allowlists with the MetaCompliance-dedicated IP addresses and/or domains to ensure users can successfully receive the simulated phishing and/or notification emails. (Notification emails can include course invitations, password resets, registration emails, etc.)

The following IP address range can be used in combination with mail header, 'mail from' domains or DKIM signing domain to build a secure condition for allowing mail.

AWS SES/EC2

1. European Data Centre – Ireland/Netherlands

2. Germany Data Centre

3. UK Data Centre

4. Canadian Data Centre

5. US Data Centre

⚠️ Note: All mail is DKIM-signed by both 'amazonses.com' or 'spm.metacompliance.com' and includes a signature for the 'mail from' domain. For example, a simulated phish from no-reply@1rs-us.com will have DKIM signatures of:

• d=1rs-us.com
• d=spm.metacompliance.com.

⚠️ Important: The below service (Twilio/SendGrid) was deprecated for simulated phishing emails on Saturday 15^th July, 2023.

To ensure all simulated phishing emails continue to function as expected, we recommend that all customers whitelist the AWS EC2 IP/Domain information (as outlined above).

We also recommend retaining the Twilio/SendGrid Allowlisting information, as this service may still be used for notification emails unless you have officially switched to AWS with our Support team.

Twilio/SendGrid

The following dedicated IPs can be trusted with confidence, as only MetaCompliance can send emails from them:

• 168.245.49.92
• 167.89.62.239

Allow bulk delivery from the IPs listed above.

Since Saturday, 15^th July, 2023, this service is used for notification emails only. For simulated phishing emails, please apply the relevant AWS EC2 settings.

⚠️ Note: Customer Support will be able to tell you which mail service your account is using and in which data centre your tenant is located.

Branding

a. Links

MetaCompliance brands phish URLs and landing pages based on the selected phishing template. Links within the phish template will be branded as below:

• Dublin: https://links-ire.domainname
• NL: https://links-nl.domainname
• UK: https://links-uk.domainname
• Canada: https://links-can.domainname
• Germany: https://links-dach.domainname
• US: https://links-us.domainname 

b. Landing Page

Custom Domain - No Form:

The expected results with clicked on phish:

• The user should be redirected to the Learning Experience.
• The URL should be: https://cloud.metacompliance.com/View/Link

Default Domain - No Form:

The expected results with clicked on phish:

• The user should be redirected to the Learning Experience.
• The URL should be: https://cloud.metacompliance.com/View/Link

Custom Domain - Form:

The expected results with clicked on phish:

• The user should be redirected to the Form Data (Landing page).
• The URL should be: https://landing.helpdesk-mailbox.com/View/Link
• Accept Form Data.
• The user should then be taken to the Learning Experience.
• The URL should be: https://cloud.metacompliance.com/View/Link

Default Domain - Form:

The expected results with clicked on phish:

• The user should be redirected to the Form Data (Landing page).
• The URL should be: https://landing.shopping-offers.biz/View/Link
• Accept Form Data.
• The user should then be taken to the Learning Experience.
• The URL should be: https://cloud.metacompliance.com/View/Link

Please find below all domains available for use within the MetaPhish module.