Installation Prerequisites
Supported Operating System for Docker Installation
LUCY runs on Docker. Docker Engine is supported on Linux, Cloud, Windows, and OS X.
Supported Linux Distributions
Ubuntu: 16.04 LTS, 18.04 LTS, 20.04 LTS, 22.04 LTS
Debian: 9.x, 10.x (Legacy)
Red Hat/CentOS: 7.x, 8.x
Hardware Requirements
Small Campaigns (up to 2000 recipients)
RAM: 8 GB
CPU: 4 Core
Hard Disk: 100 GB
Medium Campaigns (up to 50,000 recipients)
RAM: 16 GB
CPU: 8 Core
Hard Disk: 300 GB
Large Campaigns (up to 100,000 recipients)
RAM: 32 GB
CPU: 16 Core
Hard Disk: 500 GB
Outbound Network Communication
Sorted by Type of Action
License Server: Downloads updates, templates, and uploads generalized billing stats via HTTPS.
Vulnerability Checks: Allows port 80 connection to static.nvd.nist.gov for NIST CVE database. This feature can be disabled.
Sorted by Port & IP
Local License Server:
Requires access to update1.phishing-server.com for Lucy version 5 and above - The IP address is dynamic, please create an allow rule for the Domain name. For Lucy version 4.14.2 and below, please allow update.phishing-server.com (162.55.130.83).
Function: Lucy Update/License Server/HTTP proxy
IP: 162.55.130.83
Port: 80/443 (HTTP/HTTPS)
Protocol: TCP
Linux Repository:
IP: 162.55.130.83
Port: 80 (HTTP)
Protocol: TCP
DNS Server:
IP: 8.8.8.8 (or any other DNS Server)
Port: 53 (DNS)
Protocol: UDP
NIST CVE Database (Optional):
Host: nvd.nist.gov
Port: 443 (HTTPS)
Protocol: TCP
URL Shortening Service (Optional):
IP: is.gd, api-ssl.bitly.com
Port: 443 (HTTPS)
Protocol: TCP
Inbound Network Communication
Web Access:
Ports: 80 and 443
Protocol: TCP
Destination: Your LUCY Proxy IP(s)
Email Replies:
Port: 25 (SMTP)
Protocol: TCP
Destination: Your LUCY Proxy IP(s)
Malware Simulation Communication
Data Collection: Uses HTTP/HTTPS to send collected data to LUCY, compatible with environments using proxy servers.
Last updated