Follow the below if your environment whitelisting is required for outbound traffic:
1. Simulated Email:
https://alrajjhi.xyz/ or any phishing domain uses HTTP GET Request
Structure: https://{DOMAIN}/report?rid={ResultID}
Example: https://alrajjhi.xyz/report?rid=oBsJPqK
Note: there is no response received by the server.
2. Non-Simulated Email:
https://phishguard.sa/ POST API Request
API Endpoint: https://phishguard.sa/reportPhishing
POST /reportPhishing
{
"body": "",
"headers": "",
"from": "",
"to": "",
"subject": "",
"status": "",
"plugin": "",
"message_id": "",
"details": ""
}