Are there phishing domains already available for use?

When using the system, emails should be sent with a "from" address that is a valid domain name.  This domain name may be one that the client controls, or any other domain name that is valid.  Any valid domain name may be used.

• NOTE: We recommended that the "From" domain field match the phishing domain for deliverability purposes.

You can use your own custom domains within the system.  However, there are already domains setup with proper CNAMES and SPF records created. Please contact support to get a list of available phish domains.

• NOTE:  If an outside domain name is used, the user should have authorization to use the domain.