Hoxhunt sender domains

Hoxhunt's phishing simulations use various sender addresses to mimic well-known services and even you own company domains. Depending on your email security infrastructure, you may need to obtain a list or these domains to maintain proper allowlisting.

 

Download sender domains from Admin Portal

1. Navigate to Admin Portal > Settings > Email delivery.

2. Scroll down to Simulation sender domains.

3. Click Export CSV.

Admin_Portal_ Simulation_sender_domains.png

Fetch sender domains via Hoxhunt's external GraphQL API

Use the following GQL queries. For more information about using Hoxhunt GraphQL API, please refer to Set up GraphQL API.

Generic fake and lookalike domains as well as those specific to your organization:

query currentUserOrgSimulationSenderDomains { currentUser{ organization{ simulationSenderDomains{ domain createdAt } } } }

Replace <ORGANIZATION_ID> with your organization's ID. You can see obtain it from URL while logged in to Admin Portal.
For example: https://admin.hoxhunt.com/org/ORGANIZATION_ID/settings/email-delivery

Frequently asked questions

Q: Does the list contain when the domain was added? 

A: This is expected. Entries without creation date are from a time before Hoxhunt started to track their entry date to Hoxhunt training.

Was this article helpful?

0 out of 1 found this helpful

Have more questions? Submit a request