Domains Contacted During Installation

During the installation of MetaDefender Sandbox (previously known as OPSWAT Filescan Sandbox), the following domains will be contacted. Please note that this may change over time.

DomainsPurpose
api.metadefender.comMetaDefender Cloud Reputation API

api.nuget.org

data.mcr.microsoft.com

mcr.microsoft.com

packages.microsoft.com

a-0016.a-msedge.net

Microsoft Container Registry and repository for .NET packages - Used by the Powershell emulator

archive.ubuntu.com

deb.debian.org

debian.map.fastlydns.net

security.ubuntu.com

Repositories of Ubuntu and Debian packages (can be any regional or local mirror) - Used directly for Ubuntu installations and used in Docker containers for both Ubuntu and RHEL installs

auth.docker.io

docker.io

download.docker.com

registry-1.docker.io

production.cloudflare.docker.com

Used for Docker installation and downloading base images for Sandbox components

bootstrap.pypa.io

files.pythonhosted.org

pypi.org

Python package repositories - Used when building the Docker image for the Sandbox webservice component

codecs.fedoraproject.org

mirrors.fedoraproject.org

Fedora’s geographically optimized mirror server that hosts Fedora packages

d2h67oheeuigaw.cloudfront.net

d2lzkl7pfhq30w.cloudfront.net

artifact.sandbox-prod.metadefender.com

Used for downloading phishpedia package from artifact.sandbox-prod.metadefender.com - Required for phishing detection ML model

dl-ssl.google.com

dl.google.com

Used for downloading Google Chrome - Required for URL rendering in the Sandbox transform Docker container
github.comUsed for getting YARA rules from OPSWAT fsYara repository: https://github.com/filescanio/fsYara

google.com

www.google.com

Used for basic connectivity check

ntp.ubuntu.com

time-a-g.nist.gov

time-a.nist.gov

NTP and time servers
pki.googGoogle Public Key Infrastructure
playwright.azureedge.netUsed for installing playwright in the Sandbox webservice docker image
rhui.us-west-2.aws.ce.redhat.comRHEL package repository (can be any regional or local mirror)

For convenience, the same domains are also listed here:

Domains
Copy
Type to search, ESC to discard
Type to search, ESC to discard
Type to search, ESC to discard