Security Awareness Safelisting EU

Training Notifications

Proofpoint recommends that Training Notifications are sent with a “From:” address that uses your organization’s domain name. This email address will be more familiar to the user and allow the user to easily reply to the message, should they have questions. Before we can send emails using your domain name, you must contact your mail administrator as most email systems restrict email using your organization’s domain name to authorized mail servers. To allow email from our servers using your organization’s domain name, we recommend asking your email administrator to make the following changes:

• Add the appropriate IP addresses to your SPF records and your email filter safelist
• securityeducation.com is a domain that can also be safelisted for web filtering

Training Platform

• 54.229.2.165
• 52.30.130.201

In order to have the uploaded images from the Training Platform automatically downloaded within Outlook, we recommend safelisting the following domain and adding it to the Trusted Sites (located under the Security Tab in Internet options in IE): platform-web-eu.securityeducation.com 

Phishing Assessment

To ensure users are provided a realistic assessment, we recommend safelisting the following IP addresses to allow for simulated Phishing attacks to be sent to your end users:

• 52.17.45.98
• 52.16.190.81

Phishing stock images are hosted at tslp.s3.amazonaws.com.  These images are embedded in Attachments and Teachable Moments.  Safelisting this domain in your firewall or proxy server will ensure these images are displayed to your end users.  Custom images are images that the Phishing Admin has uploaded to personalize their Phishing campaign and are stored at the following domain:  ts-eu-uploads.s3.amazonaws.com.  The following Additional Phishing Administrative Resource URL can be safelisted to ensure proper delivery of all assets including text content, graphics, photographs, videos, audio files, and databases: d2k53c71t1ovai.cloudfront.net.

Phishing Domains

Below is a list of phishing domains you may utilize in your Phishing campaigns. We recommend that you provide this list to your IT or security administrators to ensure that your users will be able to access the Teachable Moment seamlessly from within your organization’s network.

Phishing Teachable Moments will also make calls to the following URLs:

• https://tslp.s3.amazonaws.com 
• https://java.com 
• https://ajax.googleapis.com 
• https://fonts.googleapis.com 
• https://tscontent.s3.amazonaws.com 
• https://d2wy8f7a9ursnm.cloudfront.net
• https://dp4eiskq7iesj.cloudfront.net