Domains serve as the foundation for hosting phishing simulation websites and landing pages, providing URLs that recipients will interact with during campaigns. Domain configuration is required for creating phishing scenarios that test user awareness and provide security training insights.
Domain creation establishes the hosting foundation for your phishing simulation infrastructure. Configuration ensures user experiences and maintains the credibility necessary for security awareness training campaigns.
Prerequisites: Before creating a domain, ensure that a DNS
A Record
is configured to point to your Phishing Club server's IP address. This DNS configuration is required
for domain resolution and SSL certificate provisioning.
Note: Proxy domains are automatically created when you configure proxy settings and cannot be manually created through this interface. See the Proxies guide for information about proxy domain management.
Configuration | Description |
---|---|
Domain | The fully qualified domain name used for phishing simulation hosting |
Website Hosting | Host a website on the domain or redirect on visit |
Managed TLS | Automatic SSL/TLS certificate management through Let's Encrypt |
Self Managed TLS | Manual SSL/TLS certificate management using certificates |
After creating the domain, you can add custom website content and configure custom 404 error
pages through the Actions
menu. These customizations help create phishing scenarios
that test user awareness.
Proxy domains retrieve content from other websites. These domains are managed via. the Proxy page and can not be created or deleted on the domains page. Only the TLS handling can be edited on domains page.
Important: Proxy domains cannot be converted to regular domains or vice versa. Each domain type serves distinct purposes in your phishing simulation infrastructure. For detailed proxy configuration and management, refer to the Proxies guide.
The content editor provides tools for customizing domain websites and 404 error pages. This interface enables creation of web content that supports your phishing simulation environment and improves user engagement during security awareness training.
Feature | Description and Usage |
---|---|
File Import | Import existing HTML, CSS, or text content from external files |
Live Preview | Split-screen editor with real-time preview that automatically updates as you modify content |
Template Variables | Insert dynamic content variables for personalization and campaign-specific information |
External Preview | Open content in a separate browser window for full-screen preview and testing |
Landing pages are the interactive components of your phishing simulations, designed to engage recipients and collect behavioral data for security awareness training. These pages are organized under campaign templates and can be configured for various stages of the user interaction journey.
Pages can serve multiple roles within your simulation workflow: Pre-Landing Pages
for initial engagement, Main Landing Pages
for primary interaction,
Post-Landing Pages
for education or redirection, and Deny Pages
for IP filtering scenarios.
Landing page creation enables you to design interactive experiences that test user security awareness while providing simulation scenarios. Each page can be customized with dynamic content, personalization variables, and interaction tracking.
Begin by providing a name that identifies the page's purpose and role within your campaign template. Consider using naming conventions that reflect the page's function and target audience.
Access the content editor by clicking Editor
to reveal design and customization options:
Tool | Function and Benefits |
---|---|
File Import | Import existing HTML templates, designs, or content from external sources |
Live Preview | Real-time split-screen preview that automatically reflects content changes |
Variable Templates | Access list of personalization variables for dynamic content insertion |
Domain Selection | Choose specific domains for preview rendering and URL structure testing |
External Preview | Open full-screen preview in separate window for testing and device compatibility |
The asset management system provides tools for uploading, organizing, and deploying multimedia content across your phishing simulation infrastructure. Assets include images, JavaScript files, CSS stylesheets, documents, and other resources that support the functionality of your landing pages and websites.
Access global assets through Open Shared Assets
to manage resources available across
all domains and campaigns. These shared assets promote consistency in content deployment.
Select specific domain names from the domains table to manage domain-specific assets that are only available within that particular domain's hosting environment.
The asset system implements priority resolution: when assets with identical paths exist in
both
Shared Assets
and domain-specific collections, the system prioritizes domain-specific
assets first, falling back to global assets when domain-specific versions are unavailable. This
hierarchy enables both global branding and domain-specific customization.
Asset upload functionality enables you to deploy multimedia content, scripts, stylesheets, and other resources to support the functionality of your phishing simulation infrastructure. Asset management is important for creating simulation experiences that test user security awareness.
Field | Purpose and Usage |
---|---|
Asset Name | Identifier for asset management and organization. Used for internal reference only, not for asset retrieval or URL generation. |
Description | Information about the asset's purpose, usage context, or special considerations for team collaboration and maintenance. |
URL Path | Path from the domain root where the asset will be accessible. This path determines the asset's URL structure and accessibility from landing pages. |
File Upload | Select single or multiple files for upload. Bulk uploads automatically create individual asset entries for each file. |