Follow the below if your environment whitelisting is required for outbound traffic:

1. Simulated Email:
        https://alrajjhi.xyz/ or any phishing domain uses HTTP GET Request

        Structure: https://{DOMAIN}/report?rid={ResultID}

        Example: https://alrajjhi.xyz/report?rid=oBsJPqK

Note: there is no response received by the server.

2. Non-Simulated Email:
        https://phishguard.sa/ POST API Request

        API Endpoint: https://phishguard.sa/reportPhishing

POST /reportPhishing

{

    "body": "",

    "headers": "",

    "from": "",

    "to": "",

    "subject": "",

    "status": "",

    "plugin": "",

    "message_id": "",

    "details": ""

}