Back to all articles

MetaCompliance Mail Server IP Addresses - All Data Centres

Depending on your environment, you may need to update your mail gateway allow lists with the MetaCompliance-dedicated IP addresses and/or domains to ensure users can successfully receive the simulated phishing and/or notification emails. (Notification emails can include Course invitation emails, password reset emails, registration emails etc.)

The following IP address range can be used in combination with mail header, mail from domains or DKIM signing domain to build a secure condition for allowing mail.

AWS SES/EC2

1. European Data Centre – Ireland/Netherlands

Information Notification Emails Simulated Phish
IP Address 54.240.90.56 - 54.240.90.57 52.215.1.192 and 52.48.175.4
Mail Header X-MyCompliance=notifications X-MyCompliance=simulation
DKIM Signing domain amazonses.com or specific “mail from” domain spm.metacompliance.com or specific "mail from" domain

 

2. UK Data Centre

Information Notification Emails Simulated Phish
IP Address 76.223.183.154 - 76.223.183.155 18.132.8.244 and 18.169.82.4
Mail Header X-MyCompliance=notifications X-MyCompliance=simulation
DKIM Signing domain amazonses.com or specific “mail from” domain spmuk.metacompliance.com or specific "mail from" domain

 

3. Canadian Data Centre

Information Notification Emails Simulated Phish
IP Address 54.240.80.102 - 54.240.80.103 3.97.121.179 and 35.183.191.238
Mail Header X-MyCompliance=notifications X-MyCompliance=simulation
DKIM Signing domain amazonses.com or specific “mail from” domain spmcan.metacompliance.com or specific "mail from" domain

 

Note – All mail is DKIM, signed by both 'amazonses.com' or 'spm.metacompliance.com' and a signature of the 'mail from' domain. For example, a simulated phish from no-reply@1rs-us.com, will have DKIM signatures of d=1rs-us.com and d=spm.metacompliance.com.

Important - The below service (Twilio/SendGrid) will be deprecated for Simulated Phishing emails on Saturday 15th July, 2023.

  • In preparation for this, and to ensure all Simulated Phishing emails continue as normal, we recommend that all customers now also whitelist the AWS EC2 IP/Domain information (as above).
  • We also recommend that you retain the Twilio/SendGrid Allowlisting information as you may still use this service to send Notification emails, unless you have officially switched to AWS with our Support Team.

Twilio/ SendGrid

The following dedicated IPs can be trusted in confidence, as only MetaCompliance can send emails from them:

  • 168.245.49.92
  • 167.89.62.239
  • Allow bulk delivery from the IPs listed above.

After Saturday 15th July, 2023, this service will be used for Notification Emails only. For Simulated Phishing emails, please apply the relevant AWS EC2 settings.

Note – Customer Support will be able to tell you which Mail Service your account is using and which data centre your tenant is located in.

 

Branding

a. Links

MetaCompliance brands phish URLs and landing pages based on the selected phishing template. Links within the phish template will be branded as below:

  • Dublin - https://links-ire.domainname
  • NL - https://links-nl.domainname
  • UK - https://links-uk.domainname
  • Canada - https://links-can.domainname

 

b. Landing Page

Custom Domain - No Form:

Expected Result with clicked on Phish:

Take the User to the Learning Experience

URL should be https://cloud.metacompliance.com/View/Link

 

Default Domain - No Form:

Expected Result with clicked on Phish:

Take the User to the Learning Experience

URL should be https://cloud.metacompliance.com/View/Link

 

Custom Domain - Form:

Expected Result with clicked on Phish:

Take the User to the Form Data (Landing page)

URL should be https://landing.helpdesk-mailbox.com/View/Link

Accept Form Data

Brought to Learning Experience

URL should be https://cloud.metacompliance.com/View/Link

 

Default Domain - Form:

Expected Result with clicked on Phish:

Take the User to the Form Data (Landing page)

URL should be https://landing.shopping-offers.biz/View/Link

Accept Form Data

Brought to Learning Experience

URL should be https://cloud.metacompliance.com/View/Link

 

Please find below all domains available for use within the MetaPhish module:

@amaz0n.website @bankofamerica-coms.info @bank-of-irelands.com
@billing-amazon.net @it-internal-support.net @itinternalhelp.com
@it-internal-support.co.uk @net-flix.co.uk @revenue-ie.org
@app1e-uk.com @appleofferings.com @britishtelecos.co.uk
@ebayy.store @gaseire.com @lewis-shops.co.uk
@mobile-offerings.com @net-flix.email @new-gyms.com
@newwlook.co.uk @online-food-offers.com @online-pizza-offers.com
@online-supermarkets.co.uk @phone-warehouses.co.uk @photo-interestsite.com
@royalbanks.co.uk @sanstandder.com @sch0e.co.uk
@seears.net @slax.online @sptify.net
@store-shoppers.co.uk @support-helpers.com @tkwarehouses.com
@tv-online-sky.com @tvlicen.com @virganatl.com
@vistinprint.com @coffee-bux.com @aclobe.net
@alerts-tsb.com @altontomers.co.uk @americaairlines.net
@americaxpress.net @anpsst.com @anytime-fitness.net
@asdaa.online @asoos.org @b00h00.net
@britishaeryways.co.uk @britishgais.co.uk @bt-net.co.uk
@budwesier.co.uk @bulkbuy.dk @burgerkingg.co.uk
@cabinet-office-uk.com @clinicalresults.co.uk @cococola.online
@comcasst.co.uk @coorslighht.co.uk @dbfileshare.com
@dells.org.uk @doddge.co.uk @drebeats.co.uk
@dunkindonut.co.uk @easyjett.info @eloay.store
@equfaxx.com @faceb0okmail.net @facebook-requests.com
@fedx.group @flights-jettoday.com @flybee.info
@fords.online @fosill.uk @goggleaccs.com
@goggle-online.com @gov-tickets.co.uk @grouponmail.net
@hermesparcelmgr.co.uk @hrdept.global @iissurvey.dk
@komputerworld.dk @linkd-in.co.uk @logoland.club
@m00npig.co @merriil-lynch.com @michigaindc.com
@moneysupernarket.co.uk @my-viza.com @nationtrusts.com
@nationwibe.co.uk @nattwest.online @next-sale.co.uk
@offers-appie.com @offfers-o2.online @ohl.world
@oldnvy-store.com @personal-dept.com @peypal.org
@royallmailservice.info @royalmoil.co.uk @ryanar.info
@sainsberrys.co.uk @sakz.org @snaapchat.co.uk
@sseaartricity.com @steemplayers.com @tallktallk.com
@targot.org @telecoms-bills.info @tomascook.online
@ubar.global @uspostalsurvice.com @utdhealtcre.com
@ver1z0n.online @wa11mart.com @we11sfarg0.com
@worldcupoffers.co.uk @xpedia.org.uk @1rs-us.com
@america-telecomms.com @bank-offers.com @citibank-holdings.net
@flight-shopping.com @health-inf.biz @servicesonline.biz
@shopping-offers.biz @skyxmas.com @spotmusik.com
@technology-serv.com @internalmail.info @hsee.ie
@hsehr.ie @hsecompliance.ie @hsepayroll.ie