Microsoft 365 Defender portal
In the Microsoft 365 Defender portal (security.microsoft.com), navigate to Email & Collaboration > Policies & Rules > Threat policies > Advanced delivery.
On the Advanced delivery page, select the Phishing simulation tab, then do one of the following:
Click Edit.
If there are no configured phishing simulations, click Add.
On the Edit third-party phishing simulation flyout that opens, configure the following:
Sending Domain: Expand this setting and enter any domains you plan to test with, then press "Enter" or select the value that is displayed below the box. Domains that are assigned to your templates can be found on the page when you are creating the campaign on our Hub or the most common ones are below.
notification-center.net
company-meeting.com
banktransfers.org
compliance-central.co.uk
docusiogn.net
goo.ggledrive.com
goo.ggledocs.co
employment-hr.nl
m.icrosoft.org
work-rewards.co.uk
NOTE: You may add up to 20 entries.
Sending IP: Expand this setting and enter the following IPs for your respective instance:
EU | US and Online Signup |
64.238.34.10 (Phishing) | 64.191.166.196 (Phishing) |
64.191.166.197 (Training) | 64.191.166.197 (Training) |
161.38.205.202 (System) | 69.72.47.194 (System) |
|
|
|
|
When you're finished, do one of the following steps:
First time: Click Add, and then click Close.
Edit existing: Click Save and then click Close.
The third-party phishing simulation entries that you configured are displayed on the Phishing simulation tab. To make changes, click Edit on the tab.