Security Awareness Safelisting EU

Safelisting On The EU (Europe) Platform

Proofpoint Security Awareness Training uses a variety of systems to communicate to devices within your network and deliver email messages to your end users. This guide documents the IP addresses, domains and URLs used to deliver this information. This document should be provided to your email or security administrators to ensure reliable communications.

Note:

  • Only perform safelisting for your licensed Proofpoint Security Awareness Training products.
  • Only safelist the IPs and domains for your hosted location. If you aren’t sure of your hosted location, please contact Customer Support.

Training Notifications

Proofpoint recommends that Training Notifications are sent with a “From:” address that uses your organization’s domain name. This email address will be more familiar to the user and allow the user to easily reply to the message, should they have questions. Before we can send emails using your domain name, you must contact your mail administrator as most email systems restrict email using your organization’s domain name to authorized mail servers. To allow email from our servers using your organization’s domain name, we recommend asking your email administrator to make the following changes:

  • Add the appropriate IP addresses to your SPF records and your email filter safelist
  • securityeducation.com is a domain that can also be safelisted for web filtering

Training Platform

  • 54.229.2.165
  • 52.30.130.201

In order to have the uploaded images from the Training Platform automatically downloaded within Outlook, we recommend safelisting the following domain and adding it to the Trusted Sites (located under the Security Tab in Internet options in IE): platform-web-eu.securityeducation.com 

Phishing Assessment

To ensure users are provided a realistic assessment, we recommend safelisting the following IP addresses to allow for simulated Phishing attacks to be sent to your end users:

  • 52.17.45.98
  • 52.16.190.81

Phishing stock images are hosted at tslp.s3.amazonaws.com.  These images are embedded in Attachments and Teachable Moments.  Safelisting this domain in your firewall or proxy server will ensure these images are displayed to your end users.  Custom images are images that the Phishing Admin has uploaded to personalize their Phishing campaign and are stored at the following domain:  ts-eu-uploads.s3.amazonaws.com.  The following Additional Phishing Administrative Resource URL can be safelisted to ensure proper delivery of all assets including text content, graphics, photographs, videos, audio files, and databases: d2k53c71t1ovai.cloudfront.net.

Phishing Domains

Below is a list of phishing domains you may utilize in your Phishing campaigns. We recommend that you provide this list to your IT or security administrators to ensure that your users will be able to access the Teachable Moment seamlessly from within your organization’s network.

Phishing Teachable Moments will also make calls to the following URLs:

Below is a list of all Phishing domains that will need to be safelisted on the European (EU) production environment.

4ooi.co.uk 

electioninfo.news 

maliciousfile.download 

 

 

 

4ooi.net 

emaildistro.net 

matchesonline.org 

 

 

 

accounts-receivable.online 

emailquarantine.net 

meeting-reminder.net 

 

 

 

admissionshelpu.com 

enegry.info 

metflix.pw 

 

 

 

adobe-0nline.net 

entwurf-laden.com 

micrasoft-395office.com 

 

 

 

adobedocuments.com 

epayroll.solutions 

micrasoft-onedrive.com 

 

 

 

aibaba-deals.com 

eservce.biz 

myensurance.services 

 

 

 

amazoon.site 

eservce.co.uk 

Mypayrollservice.net 

 

 

 

annualenroll.net 

eservce.fr 

nationalcouncil4not-for-profits.org 

 

 

 

avoidphishing.eu.securityeducation.com* 

eservce.net 

olympicresults.site 

 

 

 

bancaire.co.uk 

event-planer.com 

onlinebankingsevices.com 

 

 

 

bancaire.org 

exch01-corp.net 

online-docshare.com 

 

 

 

beingthebestU.com 

facbooklogin.co.uk 

p183321.net 

 

 

 

bizsolutions-int.co.uk 

firstfedtrust.us 

package-track.com 

 

 

 

bizsolutions-int.com 

flightstatalert.net 

package-track.info 

 

 

 

breaking-news-network.co.uk 

flight-status-alert.com 

password-update.me 

 

 

 

breaking-news-now.net 

flight-status-alert.me 

payqal-login.com 

 

 

 

c0ncursolutions.com 

freeenergypress.org 

phishingtraining.eu 

 

 

 

cardservices.vip 

fundingsource.world 

ransomware.website 

 

 

 

citydiscounts.org 

giftgreeting.com 

recruitpros.co 

 

 

 

cloud-store.space 

global-bancaire.com 

register-now.net 

 

 

 

coffeetooyourdesk.com 

gotwebinar.org 

rnetflix.io 

 

 

 

combase.io 

gov-services.net 

scandoc-center.com 

 

 

 

committee4strongleadership.org 

grnail.online 

securityeducation.com 

 

 

 

contract-sign.site 

hpdocument.net 

security-education.net 

 

 

 

corpbenefitplan.net 

hr-internal.co 

self-serve.ltd 

 

 

 

corp-internal.co 

hrmc.me.uk 

shipping-notification.info 

 

 

 

corp-internal.org 

ibwalletsecurelogin.com 

shoppingbuyrewards.com 

 

 

 

corpoutlook.co.uk 

informedvoterleague.org 

sportstoday.life 

 

 

 

corp-password-mangemet.com 

info-week.biz 

sso-local.net 

 

 

 

corp-password-mangemet.fr 

instagrarn.org 

stubclub.net 

 

 

 

corp-password-mangemet.us 

internalitsupport.net 

swift-track.co.uk 

 

 

 

cyber-sale.com 

investmentsecuresite.com 

swift-track.info 

 

 

 

dcscanscation.net 

k-trafficxmj.co 

techsupport-corp.net 

 

 

 

decision2016.online 

k-trafficxmj.co.uk 

therecruitpro.net 

 

 

 

detailswire.net 

k-trafficxmj.com 

uscis-gov.net 

 

 

 

docsign-online.net 

linkedincdn.co.uk 

user-account.net 

 

 

 

docs-sharepoint.com 

linkedincdn.net 

verifier-sure.com 

 

 

 

dodgylink.co.uk 

linkedincdn.us 

vobamobile.co 

 

 

 

domainte.com 

loanpaymentservices.com 

xerox-scandevice.com 

 

 

 

dropboxlink.net 

localhostlocaldomain.net 

yggui.de 

 

 

 

dynssi.net 

mailcenter-alert.net 

yggui.li 

 

 

 

Eatandreward.com 

mail-delivery-system.info 

youarebeingphished.com 

 

 

 

egencia-website.com 

maliciousfile.com 

Yourexpo.co.uk