Categories: CyberHoot

CyberHoot’s Email-Relay IP Addresses, Domains, and Allow-list Articles

Updated: May 8th, 2025

This article is a reference to CyberHoot’s mail relay IP Addresses and Domain names.  The process of allowing phishing tests through to your end users inboxes is dependent upon your mail and spam filters.  CyberHoot provides instructions and scripts on bypassing Microsofts Spam, Clutter, and Junk filters as well as adding our mail domains to the safe senders lists.  

Please note that if you are using multiple filters in series, you will also need to set up X-Headers in addition to allow lists to deliver email to your end users.  You may wish to run powershell scripts we have prepared to make your life easier.

CyberHoot Training Assignments Relay:

CyberHoot assignments are delivered via email.  Currently, all assignments flow through AWS SES, as such, there is no need to create an allow list as AWS SES reputation is excellent, but if you choose to, you can add our domain name and the following IP addresses below to the allow list.

  • DNS Name: cyberhoot.com
  • IP Addresses: 54.240.125.36/32 and 54.240.125.37/32

Phishing Test Mail Relays

If you are planning on sending traditional (attack-based) Phishing Tests to your clients and prospects, you will need to enable all of CyberHoot’s Email Relays shown below:

DNS DOMAIN Names: IP Addresses:
ch-account-2fa.com 3.212.253.236/32
ch-contact-us.com 34.235.208.123/32
ch-login-created.com 44.209.10.205/32
ch-password-reset.com 52.200.160.242/32
ch-security-alert.com 54.164.218.52/32
docunotice.com 23.20.251.170/32
messagecenters.net 52.7.191.238/32
securedinbox.net 52.6.6.155/32
notificationhub.net 18.213.175.22/32
filealert.org 34.226.89.171/32
secure-access.info 18.210.65.168/32
login-updates.com 54.159.125.85/32
updateportals.com 54.225.129.23/32
accountverifies.com 3.234.113.11/32
auth-check.page 54.175.87.114/32

Looking for a downloadable copy of the table above in CSV format?

And here we have  a comma separated list with just the domain names:
ch-account-2fa.com,ch-contact-us.com,ch-login-created.com,ch-password-reset.com,ch-security-alert.com,docunotice.com,messagecenters.net,securedinbox.net,notificationhub.net,filealert.org,secure-access.info,login-updates.com,updateportals.com,accountverifies.com,auth-check.page

Another list, this time just the IP addresses:
3.212.253.236/32,34.235.208.123/32,44.209.10.205/32,52.200.160.242/32,54.164.218.52/32,23.20.251.170/32,52.7.191.238/32,52.6.6.155/32,18.213.175.22/32,34.226.89.171/32,18.210.65.168/32,54.159.125.85/32,54.225.129.23/32,3.234.113.11/32,54.175.87.114/32

*As of May 8th, 2025 all of CyberHoot’s Phish testing will be sent from these IP addresses.

rssfeeds-admin

Share
Published by
rssfeeds-admin

Recent Posts

The Tiny Firebat AM02 Ryzen 5 6600H Mini PC Is a Complete Windows 11 System at Just $250

If you're a Windows user who's looking for a PC version of the Apple Mac…

42 minutes ago

Agreement With Toll Road Operator

FORT WAYNE, Ind. (WOWO) — The state of Indiana has agreed to let the Indiana…

2 hours ago

Multiple Storm Rounds

FORT WAYNE, Ind. (WOWO) — Severe thunderstorms are expected to move across central Indiana in…

2 hours ago

Universal Pictures at CinemaCon 2026: Everything Revealed

Universal Pictures and Focus Features have taken the stage at CinemaCon. We're expecting new looks…

2 hours ago

Tax Day 2026: Democrats and Republicans battle over impact of new Trump tax cuts

Maritza Montejo, a Liberty Tax Service office manager, helps Aurora Hernandez, left, with her taxes…

2 hours ago

Union Accuses Rockford Schools of Ignoring Bilingual Class Size Law

The Rockford Education Association is accusing Rockford Public Schools 205 of unfair labor practices. The…

2 hours ago

This website uses cookies.