Riot provides a non-exhaustive list of spoofed domains to simulate realistic phishing attacks and improve your employees' security awareness.
❶ Configuration and integration
👉 If you use an API whitelist configuration
You may need to integrate this list into your security tool so that spoofed domains are properly handled during your simulations.
👉 Add Riot-generated domains to your whitelist
At the same time, verify that you have added Riot-generated domains to your whitelist (available in your settings). Check our dedicated article to learn more: How to find your Riot-generated domains
❷ List of available domains
The domains below are sorted by product and presented in alphabetical order:
Adobe : noreply-adobe.com, creative-cloud-adobe.com
Airbnb : noreply-airbnb.com
Amazon : amazon-aws.cloud, noreply-amazon.co
Améli : ne-pas-repondre-ameli.org
Apple : noreply-apple.pro, appple.pro
Atlassian : atlassian.cloud, atlassian.com, atlassian.co, at1assian.com, noreply.link
Culture Amp : culture-amp.com
Développement Durable Gouv : developpement-durable-gouv.org
Digiposte : laposte-online.net
DocuSign : docu-sign.pro, docuign.co, dpcsuign.com
Dropbox : drob00x.com, droboox.com
Edenred : edernred.com, edrened.com
Eurecia : eurrecia.com
Facebook : farcebook.app
GitHub : noreply-github.co, gvithub.dev
GitLab : giitlab.com
Google : console-google.cloud, gpo1ge.com, goo1ge.com, gpolge.com, noreply.link
HubSpot : hub-spot.pro, noreply-hubspot.com
Impôts Gouv : noreply-impots-gouv.org
Instagram : insatgram.app
Intercom : intecrom.com
LinkedIn : llnkedin.one, 1inekdin.com
Lucca : luccca.com, noreply-lucca.com
Microsoft : m365outlook.com, ms365cloud.com, micros0ft.app, niicrosoft.com, microso0ft.com, micros0oft.com, micr0osoft.com, microksoft.com, micrkosoft.com, micrgosoft.com, microsoft.co, rnircpsoft.com, micprsoft.com, noreply.link
Monday : mondaay.app
Notion : nootion.pro, noreply-notion.app
Okta : noreply-okta.com, opkta.com
OnePassword : 1passwords.app
Salesforce : salseforce.co, sa1seforce.com
SAP : noreply-sap.com
Silae : sillae.com
Slack : slack-app.cloud, slock.app, slacks.app
Spendesk : spendesks.com
TeamViewer : teamviiewer.org
Uber : ubehr.com
UberEats : ubeereats.app
UPS : delivery-ups.com
Webex : weebex.app
WeTransfer : wetarnsfer.co, noreply-wetransfer.com
Workday : noreply-workday.com
YouSign : you-sign.app, yousigm.com
Zendesk : zendsk.org, zenedsk.com
Zoom : zponr.us, zoonr.us
⚠️ Important : This list is not exhaustive and may evolve over time. For each phishing campaign, verify the domain names used to ensure they are properly whitelisted on your security tools.