When creating manual email scenarios or customizing landing pages, you can use template variables — dynamic placeholders that are replaced with real data when the phishing email is sent to each target.
Variables use Go template syntax: {{.VariableName}}
These variables are populated from the target employee's profile.
| Variable | Description | Example Output |
|---|---|---|
{{.FirstName}} |
Recipient's first name | John |
{{.LastName}} |
Recipient's last name | Doe |
{{.Email}} |
Recipient's email address | john.doe@company.com |
{{.Position}} |
Recipient's job title | Sales Manager |
These variables handle links, tracking, and campaign identification.
| Variable | Description | Usage |
|---|---|---|
{{.RId}} |
Unique recipient identifier (encoded) | Used internally for tracking — include in URLs |
{{.RIdBasic}} |
Recipient identifier (basic format) | Alternative to RId for simpler URL schemes |
{{.URL}} |
Full phishing landing page URL | The main clickable link in your email |
{{.BaseURL}} |
Base URL without path | Useful for constructing custom URLs |
{{.TrackingURL}} |
Tracking pixel URL | Records email opens |
{{.Tracker}} |
Pre-built tracking pixel <img> tag |
Drop into HTML to track opens automatically |
{{.TrackerAttachment}} |
Tracking via attachment open | Tracks when attachments are opened |
These variables pull data from the environment and sender configuration.
| Variable | Description | Example Output |
|---|---|---|
{{.From}} |
Sender email address | security@company-verify.com |
{{.DetailsLastScenarioService}} |
Details of the last scenario service used | Environment-specific metadata |
{{.LogoServiceUsed}} |
Logo URL of the service/environment | URL to the environment logo image |
{{.GTPService}} |
Internal service identifier | Internal service reference |
<p>Dear {{.FirstName}},</p>
<p>We noticed unusual activity on your account ({{.Email}}).
Please verify your identity by clicking the link below:</p>
<p><a href="{{.URL}}">Verify your account</a></p>
<p>Best regards,<br>
IT Security Team</p>
{{.Tracker}}
<p>Hi {{.FirstName}} {{.LastName}},</p>
<p>As {{.Position}}, you've been selected for early access
to our new security training portal. Click below to activate
your account:</p>
<p><a href="{{.URL}}">Activate Now</a></p>
<p>This link expires in 24 hours.</p>
{{.Tracker}}
{{.FirstName}}, your package delivery failed.
Reschedule here: {{.URL}}
Always include
{{.Tracker}}at the end of HTML email templates. Without it, email open events will not be recorded in campaign results.
Always use
{{.URL}}for the phishing link rather than hardcoding URLs. This ensures each recipient gets a unique, trackable link.
Variables are case-sensitive.
{{.firstname}}will not work — use{{.FirstName}}.
Test before sending. Always preview your template and send a test email to verify that variables render correctly.