Skip to content

IP addresses, URLs, and domains

Find out below the IP addresses, URLs, and domains Sophos Phish Threat uses when sending phishing campaigns.

  • For Sophos Mailflow users, add the IP addresses according to your region. See Email domain information.
  • 54.240.51.52
  • 54.240.51.53
  • amazonses.com
  • ~eu-west-1.awstrack.me~
  • ~sophos-phish-threat.go-vip.co~

Note

Links contained within campaign emails are configured to redirect users to the awstrack.me URL. Sophos Phish Threat uses AWS tracking to determine which users clicked on the malicious links.

You must also configure the advanced delivery settings in Microsoft 365 to add these. See Add the IP addresses, URLs, and domains.

To find out about the behavior of Office 365 ATP Safe Link and Safe Attachments with Sophos Phish Threat, see the following articles: