Hoxhunt's phishing simulations use various sender addresses to mimic well-known services and even you own company domains. Depending on your email security infrastructure, you may need to obtain a list or these domains to maintain proper allowlisting.
Download sender domains from Admin Portal
1. Navigate to Admin Portal > Settings > Email delivery.
2. Scroll down to Simulation sender domains.
3. Click Export CSV.
Fetch sender domains via Hoxhunt's external GraphQL API
Use the following GQL queries. For more information about using Hoxhunt GraphQL API, please refer to Set up GraphQL API.
Generic fake and lookalike domains as well as those specific to your organization:
query currentUserOrgSimulationSenderDomains { currentUser{ organization{ simulationSenderDomains{ domain createdAt } } } }
Replace <ORGANIZATION_ID> with your organization's ID. You can see obtain it from URL while logged in to Admin Portal.
For example: https://admin.hoxhunt.com/org/ORGANIZATION_ID/settings/email-delivery
Frequently asked questions
Q: Does the list contain when the domain was added?
A: This is expected. Entries without creation date are from a time before Hoxhunt started to track their entry date to Hoxhunt training.