CyberHoot’s Email-Relay IP Addresses, Domains, and White-list Articles:

This article is a reference to CyberHoot’s mail relay IP Addresses and Domain names.  The process of allowing phishing tests through to your end users inboxes is dependent upon your mail and spam filters.  CyberHoot provides instructions and scripts on bypassing Microsofts Spam, Clutter, and Junk filters as well as adding our mail domains to the safe senders lists.  

Please note that if you are using multiple filters in series, you will also need to set up X-Headers in addition to allow lists to deliver email to your end users.  You may wish to run powershell scripts we have prepared to make your life easier.

CyberHoot Training Assignments Relay:

CyberHoot assignments are delivered via email.  Currently, all assignments flow through the single server listed below however, this may change as CyberHoot grows.  It is suggested for for email assignments you should create an allow list for the following specific mail relay.  

  • DNS Name:  mail.cyberhoot.com
  • IP Address:  108.52.60.138

 

Phishing Test Mail Relays

If you are planning on sending Phishing Tests to your clients and prospects, you will need to enable all of CyberHoot’s Email Relays shown below:

DNS Names:

  • admin-rnicrosoft.services
  • lockout-appie.com
  • admin-googie.support
  • server33-arnazon.com
  • johnshopkinshospitals.com
  • sba-stimulus-loans.com
  • linkedln-support.com
  • netfiix-help.com
  • docu-esign.com
  • ch-account-2fa.com
  • ch-contact-us.com
  • ch-login-created.com
  • ch-password-reset.com
  • ch-security-alert.com
  • irs-security.com
  • visa-security.com
  • zoom-account.com

IP Addresses:

  • 108.52.60.142
  • 108.52.60.135
  • 108.52.60.139
  • 108.52.60.140
  • 108.52.60.135
  • 108.52.60.139
  • 108.52.60.140
  • 108.52.60.132
  • 108.52.60.142
  • 108.52.60.135
  • 108.52.60.135
  • 108.52.60.139
  • 108.52.60.139
  • 108.52.60.140
  • 108.52.60.140
  • 108.52.60.142
  • 108.52.60.142

*Optionally, you can cover all of these domains and IP addresses if you allow our subnet:  108.52.60.128/28.

Some Services will ask for a Comma-Separated List of IPs:  Here’s our list in total:

108.52.60.132,108.52.60.133,108.52.60.134,108.52.60.135,108.52.60.136,108.52.60.137,108.52.60.138,108.52.60.139,108.52.60.140,108.52.60.141,108.52.60.142

Share this on your social networks. Help Friends, Family, and Colleagues become more aware and secure.