NINJIO regularly updates its allowlisting configurations to support reliable delivery of training and phishing simulations. These updates are effective as of September 25, 2026.

Instructions

1) Please follow our guides to configure your email systems using the IPs and Domains below:

• Microsoft 365 (including Microsoft Defender)
• Google Workspace
• Mimecast
• Proofpoint

2) If applicable, please also configure any additional security systems in your IT environment:

• Email security (e.g. Proofpoint, Mimecast)
• Firewalls (e.g. SonicWall, Palo Alto)
• Content filters (e.g. Zscaler)

IPs and Domains

Allow these SMTP IPs

The NINJIO platform will send emails from these IP addresses. Configure email security systems to allow.
Green ones reflect new additions.

Please consider: Some IT environments may require also requiring adding these to inbound firewall rules.

Allow these Domains

The NINJIO platform will use these for phish links and landing pages. Configure email security systems to allow.
Green ones reflect new additions.

All above domains should be configured with wildcards to allow for subdomains (e.g. *.ninjio.com).

--> Advanced Security Scenarios (not typically required)