! Title: kswroFilters - Simulation Bypass
! Description: Intercepts and neutralizes domains utilized by automated security assessment platforms and internal phishing simulation tools. Designed to minimize disruptions caused by routine social engineering drills.
! Expires: 1 days (update frequency)
! Homepage: https://adblock.kaswo.ro/bypass.txt
! Version: 2026-01-12 Mon 14:32:32
! Maintainer: Praditya Kasworo

! ============================================================================
! 1) USECURE (Simulation & related infrastructure)
! ============================================================================
||api.usecure.io^
||innermail.co.uk^
||mail.user-training.com^
||rp.mail.user-training.com^
||usecure.io^
||user-training.com^


! ============================================================================
! 2) KNOWBE4 (Simulation endpoints/tools only)
! ============================================================================
||phishalert.com^
||training.knowbe4.com^
! (Intentionally not blocking main knowbe4.com)


! ============================================================================
! 3) MIMECAST AWARENESS TRAINING (Simulation campaign domains)
! ============================================================================
||account-renewals.com^
||accountsecuritynotices.com^
||benefits-bulletin.com^
||ceo-update.com^
||company-updates.com^
||corp-accounts.com^
||corp-news.com^
||corp-update.com^
||corporate-payroll.com^
||corporate-updates.com^
||cy-se.com^
||employee-news.com^
||info-needed.com^
||instant-promos.com^
||payroll-news.com^
||payroll-updates.com^
||relaysvc.com^
||salary-info.com^
||secure-corporate-communications.com^
||secure-corporate-news.com^
||secure-corporate-updates.com^
||secure.ataata.com^
||secureceocommunications.com^
||securesecuritysolutions.com^
||subscriptionrenewalnotices.com^
||subscriptionrenewalservices.com^
||sysgen-cash.com^
||sysgen-payroll.com^
||therelayservice.com^
||worldwidenewsupdates.com^
! (Intentionally not blocking mimecast.com)


! ============================================================================
! 4) PROOFPOINT SAT (ex-Wombat) – Default phishing simulation domains
! ============================================================================
||docsign-online.com^
||dropboxlink.com^
||hpdocument.com^
||linkedincdn.com^
||mail-center-alert.com^
||mail-delivery-system.com^
||mailcenter-alert.com^
||maildeliverysystem.net^
||meeting-reminder.com^
||metflix.us^
||micrasoft-office365.com^
||onedrive-micrasoft.com^
||onlinedocshare.com^
||password-update.com^
||password-update.net^
||paypol-login.com^
||phishingtraining.com^
||publicemailservice.com^
||register-now.world^
||securebankingsevices.com^
||seriouslydonotclickthis.com^
||shipment-confirm.com^
||shippingupdate.net^
||thisisaphishingattack.com^
||trackingupdate.net^
||updamicrosoft.com^
||updatracking.com^
||user-account-maintenance.com^
||user-account.online^
||voicemailaccess.net^
||webfilteralert.com^
! (Intentionally not blocking proofpoint.com / wombatsecurity.com)


! ============================================================================
! 5) SOPHOS PHISH THREAT (Simulation click redirector)
! ============================================================================
||awstrack.me^
! (Intentionally not blocking sophos.com / sophoscentral.com)


! ============================================================================
! 6) CANIPHISH (Official simulation domains – sender/landing)
! ============================================================================
||alerting-services.com^
||authenticationsecure.com^
||authwebmail.com^
||caniphish.com^
||cloud-notification-services.com^
||cmail31.com^
||email-forwarder.net^
||learn.caniphish.com^
||office-365-notifications.com^
||onlineverify.net^
||paypaypal.net^
||portal-login.net^
||verificationweb.net^
||webnotifications.net^


! ============================================================================
! 7) HOXHUNT (Phishing simulation & awareness platform)
! ============================================================================
||training.hoxhunt.com^
! (Intentionally not blocking main hoxhunt.com business domain broadly)


! ============================================================================
! 8) PERCEPTION POINT / 13SECURITY (Related infrastructure)
! ============================================================================
||securesupportcloud.com^
! (Other domains are covered under the CanIPhish section)


! ============================================================================
! 9) MISCELLANEOUS (Additional common simulation domains)
! ============================================================================
||alerting-services.com^
||authwebmail.com^
||cmail31.com^
||securesupportcloud.com^
||webnotifications.net^