Domain & IP Allow-Listing
Learn how to ensure your users receive your SMPhish simulated phishing emails by allow-listing SiberMate's IPs and domains.
One of the most common reasons for phishing simulations or course emails not being delivered to end users is that SiberMate IPs and domains aren't allow-listed in their email clients.
- Allow-listing in Microsoft 365 or Exchange
- Ensure phishing simulation delivery to M365 inboxes with Microsoft Advanced Delivery
- Allow-listing in Google Workspace
- What are the SiberMate IP addresses?
- What are the SiberMate domains?
Allow-listing in Microsoft Exchange 2013 & 2016
If you use Microsoft Exchange 2013 & 2016, you must allow-list SiberMate IP addresses and domains.
Allow-listing in Microsoft 365 or Exchange
Allow-listing in Microsoft 365
If you use Microsoft 365 you must allow-list SiberMate IP addresses and domains.
Ensure phishing simulation delivery to M365 inboxes with Microsoft Advanced Delivery
We now recommend Message Injection as the preferred delivery method for simulated phishing emails.
- Set up Message Injection in Microsoft 365
Allow-listing in Google Workspace
If you use Google Workspace, you must allow-list SiberMate IP addresses and domains.
Allow-listing in Google Workspace
We now recommend Message Injection as the preferred delivery method for simulated phishing emails.
- Set up Message Injection in Google Workspace
What are the SiberMate IP addresses?
198.21.6.191 168.245.56.242 99.80.168.14
What are the SiberMate domains?
Mandatory for custom sender address:
user-training.com
Other simulation domains:
For latest simulation domain kindly check under simulation domains list option :
Go to Settings > SMPhish > Simulation Domain
Please be advised that our domain name will be updating to accommodate our dynamic domain configuration, kindly check Simulation Domain list to get the latest domain.
Streamline your workflow by programmatically fetching updated simulation domains, account exposures, and service breach lists via API or Model Context Protocol (MCP)
Next steps
- Find out how to allow list in Microsoft 365 or Exchange
- Find out how to ensure phishing simulation delivery to M365 inboxes with Microsoft Advanced Delivery
- Find out how to allow list in Google Workspace