Phishing Simulator Allowlisting for Google Mail (Gmail)

Just to be sure you are set-up for success with our Phishing Simulator we will require you to allowlist our messaging. Otherwise your email provider is going to (quite rightly) block our simulators phishing attempts so you will not get any emails sent out!

See below on how to get this setup for Google Mail.

1. Log in to your Google Workspace Admin Console (admin.google.com) using an administrator account.
2. Navigate to the Gmail Settings
   1. From the Admin console home page, go to Apps.
   2. Then, select Google Workspace.
   3. Now, click on Gmail

   4. And lastly into Spam, Phishing and Malware.

For IP Addresses:

1. On the left, select the top-level organization. This is usually your domain.

2. On the Spam, phishing, and malware tab, scroll to the Email allowlist setting. Or, in the search field, enter email allowlist.

3. Once you are in here, you will then want to add our sender IP addresses: 198.244.54.129, 198.244.54.140.

For our domains:

1. Next, you'll need to allow our domains to come through.
   1. Also in the Spam, Phishing and Malware option, select an organizational unit in the left menu
   2. Scroll to Spam and click Configure or Add another rule.
   3. In the Add setting box, enter a unique name for the setting (for your own reference)
   4. Choose "Bypass spam filters for messages from senders or domains in selected lists" and then add the sender's domains: noreply-google.com, webnotification.org, noreply-notify.com, koi.goethena.com
   5. Click save at the bottom of the Add setting box. 
   6. It can take around 24 hours for this setting to update.
2. Once this is done, click save and you are all ready to go!

For your reference, Google provides the following help article on this topic:

Allowlists, denylists, and approved senders

Add custom spam filters to Gmail

Add an IP address to your allowlist