Domains Contacted During Installation
During the installation of MetaDefender Sandbox (previously known as OPSWAT Filescan Sandbox), the following domains will be contacted. Please note that this may change over time.
| Domains | Purpose |
|---|---|
| api.metadefender.com | MetaDefender Cloud Reputation API |
| Microsoft Container Registry and repository for .NET packages - Used by the Powershell emulator | |
| Repositories of Ubuntu and Debian packages (can be any regional or local mirror) - Used directly for Ubuntu installations and used in Docker containers for both Ubuntu and RHEL installs | |
| Used for Docker installation and downloading base images for Sandbox components | |
| Python package repositories - Used when building the Docker image for the Sandbox webservice component | |
| Fedora’s geographically optimized mirror server that hosts Fedora packages | |
| Used for downloading phishpedia package from artifact.sandbox-prod.metadefender.com - Required for phishing detection ML model | |
| Used for downloading Google Chrome - Required for URL rendering in the Sandbox transform Docker container | |
| github.com | Used for getting YARA rules from OPSWAT fsYara repository: https://github.com/filescanio/fsYara |
| Used for basic connectivity check | |
| NTP and time servers | |
| pki.goog | Google Public Key Infrastructure |
| playwright.azureedge.net | Used for installing playwright in the Sandbox webservice docker image |
| rhui.us-west-2.aws.ce.redhat.com | RHEL package repository (can be any regional or local mirror) |
For convenience, the same domains are also listed here:
api.metadefender.comapi.nuget.orgdata.mcr.microsoft.commcr.microsoft.com packages.microsoft.coma-0016.a-msedge.netarchive.ubuntu.comdeb.debian.orgdebian.map.fastlydns.netsecurity.ubuntu.comauth.docker.iodocker.iodownload.docker.comregistry-1.docker.ioproduction.cloudflare.docker.combootstrap.pypa.iofiles.pythonhosted.orgpypi.orgcodecs.fedoraproject.orgmirrors.fedoraproject.orgd2h67oheeuigaw.cloudfront.netd2lzkl7pfhq30w.cloudfront.netartifact.sandbox-prod.metadefender.comdl-ssl.google.comdl.google.comgithub.comgoogle.com www.google.comntp.ubuntu.comtime-a-g.nist.govtime-a.nist.govpki.googplaywright.azureedge.netrhui.us-west-2.aws.ce.redhat.com