NINJIO regularly updates its allowlisting configurations to support reliable delivery of training and phishing simulations. These updates are effective as of September 25, 2026.
Step 1: Select Your Email Environment Guide
Follow our step-by-step configuration guide for your specific email environment using the IP addresses and domains listed on this page:
- Microsoft 365 (including Microsoft Defender)
- Google Workspace
- Mimecast
- Proofpoint
Using Layered Security? If your organization routes mail through a Secure Email Gateway (e.g., Proofpoint, Mimecast) in front of Microsoft 365 or Google Workspace, or uses web filters/firewalls (e.g., Zscaler, Palo Alto, SonicWall), you must allowlist NINJIO in both your gateway and your mail server.
Step 2: Allowlist SMTP Sending IP Addresses (All Environments)
The NINJIO platform sends all training notifications and simulated phishing emails from these dedicated IP addresses. Configure your email security gateway, Exchange Transport Rules, M365 Advanced Delivery Policy, and M365 Partner Connector to allow all 7 IP addresses below.
(Items marked in Bold were added on September 25, 2026)
159.135.230.133159.135.235.211161.38.196.11269.72.46.85168.245.68.23569.72.33.74198.244.55.48
Step 3: Allowlist Phishing Simulation Domains (Select Format by Platform)
Different email security platforms have different formatting rules for domains (some support wildcards like *.domain.com, while Microsoft 365 Advanced Delivery Policy requires exact root domains and explicit subdomains without wildcards). Choose the format below that matches the system you are configuring:
Explicit Root Domains & Subdomains
Where to use this list: Use this exact list for the Microsoft 365 Defender Advanced Delivery Policy (Phishing Simulation → Domain) field, or in any security gateway that does not allow wildcards.
Important for M365 Admins: Microsoft 365 Advanced Delivery Policy does not accept wildcards (
*.domain.com/*) in the Domain field, and adding a root domain does not cover its subdomains. You must add both the Root Sending Domains and the Explicit Sending Subdomains below
PHISH 3D Simulation Root Domains
approvalworkspace.com profileactivity.com sheetreview.com corporate-forms.com documentflow.io projectworksuite.com technology-services.net credential-update.me mycartcheck-out.com media-sharer.com securegateway-access.com ez-sendfile.net secure-scores.co encryptiaportal.net secure-paymentlink-auth.com drive-signin.org passlink-secure.com csatsafety-training.org net-link-secure.com mypasschange.com cybersecurityawarenesstraining.com
PHISH 3D Simulation Explicit Subdomains
officialbusinessonly.documentflow.io index.corporate-forms.com myfiles.projectworksuite.com security.approvalworkspace.com secure-registry.mycartcheck-out.com dashboard-reports.ez-sendfile.net platform-ops.securegateway-access.com efiles.passlink-secure.com file101.ez-sendfile.net secure.encryptiaportal.net myscore.secure-scores.co suite.encryptiaportal.net ph3d.secure-scores.co on365-admin.securegateway-access.com n365-admin.securegateway-access.com sec.net-link-secure.com g-online-suite.drive-signin.org device.secure-paymentlink-auth.com device-auth-online.media-sharer.com safe-dmtffyascrg53bqrp8qitl9.secure-paymentlink-auth.com online-ops.mypasschange.com onlineportalsignin.drive-signin.org secure-directory.net-link-secure.com
Wildcard Format
Where to use this list: Use wildcard formatting (*.domain.com) in Proofpoint, Mimecast, Web Filters, and Firewalls where wildcard subdomains are supported. Use Microsoft 365 wildcard formatting (*.domain.com/*) where permitted (Simulation URLs) in M365.
Microsoft 365 Wildcard URL Format Domains
*.approvalworkspace.com/* *.profileactivity.com/* *.sheetreview.com/* *.corporate-forms.com/* *.documentflow.io/* *.projectworksuite.com/* *.technology-services.net/* *.credential-update.me/* *.mycartcheck-out.com/* *.media-sharer.com/* *.securegateway-access.com/* *.ez-sendfile.net/* *.secure-scores.co/* *.encryptiaportal.net/* *.secure-paymentlink-auth.com/* *.drive-signin.org/* *.passlink-secure.com/* *.csatsafety-training.org/* *.net-link-secure.com/* *.mypasschange.com/* *.secure-ai-templates.com/* *.cybersecurityawarenesstraining.com/*
Wildcard Format Domains
*.approvalworkspace.com *.profileactivity.com *.sheetreview.com *.corporate-forms.com *.documentflow.io *.projectworksuite.com *.technology-services.net *.credential-update.me *.mycartcheck-out.com *.media-sharer.com *.securegateway-access.com *.ez-sendfile.net *.secure-scores.co *.encryptiaportal.net *.secure-paymentlink-auth.com *.drive-signin.org *.passlink-secure.com *.csatsafety-training.org *.net-link-secure.com *.mypasschange.com *.cybersecurityawarenesstraining.com
Step 4: Platform, Training & Support Domains (Non-Phishing)
These domains are used for NINJIO training notifications, platform administration, and customer support.
Where to allowlist: Add these to your general Anti-Spam Safe Senders / Gateway Allowlists (e.g., Proofpoint, Mimecast, Google Workspace).
Microsoft 365 Note: Because your Exchange Transport Rule (Part A) already allows NINJIO traffic by IP address, do NOT add ninjio.com (corporate/support) to your M365 Phishing Simulation Advanced Delivery Policy.
goninjio.com(Platform & Training)admin.goninjio.com(Platform Admin)ninjioaware.com(Training Portal)-
ninjio.com(NINJIO Corporate & Support Communications — Do not add to Phishing Simulation policies)
Step 5: Firewall, Web Filter & HTTPS Traffic Allowlisting
If your organization uses strict outbound web filters, proxies, or firewalls (e.g., Zscaler, Palo Alto, SonicWall), allow HTTPS traffic to the following hostnames so users can view training videos, load landing pages, and use the NINJIO Alert Phish Reporter button:
landing.goninjio.com(Phishing Simulation Landing Pages)learn.ninjioaware.com(Training Video & Learning Portal)admin.goninjio.com(Platform Administration)ninjio.wistia.com(Video Hosting)ws.onehub.com(Content Delivery)reporter.goninjio.com(Phish Reporter Add-in)reporter.prod.ninjio-infra.com(Phish Reporter Infrastructure)rb.prod.ninjio-infra.com(Phish Reporter Infrastructure)secure-ai-templates.com(Sensei AI Template Generator)
Comments
0 comments
Article is closed for comments.