To ensure that both Hoxhunt report button and training functions smoothly, make sure your proxy, VPN and firewall solutions aren't blocking user's access to Hoxhunt service.
NOTE: Only allowlist these domains and sub-domains if you are experiencing connectivity issues. To help determine whether any of the critical domains are blocked by your network stack, please make use of web browser inspect tool.
Hoxhunt platform-specific domains and sub-domains
Your network stack must allow access to the following key locations, depending on the Hoxhunt products you have:
- api.hoxhunt.com: Hoxhunt backend services
auth.hoxhunt.com: log in page and authentication
game.hoxhunt.com: training dashboard for end users
admin.hoxhunt.com: Hoxhunt Admin Portal
insights.hoxhunt.com: Insights reports
response.hoxhunt.com: Threat Feed, Incident Orchestration, Search & Destroy
reports.hoxhunt.com: Reports portal
browser.hoxhunt.com: Browser Defense
sense.hoxhunt.com: Hoxhunt Sense
Hoxhunt Outlook button-specific domains and sub-domains
In order for Hoxhunt button to operate properly, your network stack must allow access to the following:
Hoxhunt Outlook COM add-in
- api.hoxhunt.com
- app.hoxhunt.com
- game.hoxhunt.com
Hoxhunt Outlook web add-in (manifest.xml)
- officejs.hoxhunt.com
- ajax.aspnetcdn.com
- appsforoffice.microsoft.com
- public.hoxhunt.com
- cdn.hoxhunt.com
- api.hoxhunt.com
- auth.hoxhunt.com
- app.hoxhunt.com
- game.hoxhunt.com
Instant Feedback
If you are using Instant Feedback, make sure the following address is accessible:
- response.hoxhunt.com
Training content: images, icons and videos
storage.googleapis.com: images and icons in training content
*.cloudflarestream.com: training videos
videodelivery.net and *.videodelivery.net: training videos
res.cloudinary.com: images in training content
Please reach out to Hoxhunt Support.
Voice Phishing SAT (ElevenLabs)
In Voice Phishing SAT Lessons, users talk with an AI voice agent directly in their web browser. The audio is streamed to Hoxhunt's voice provider, ElevenLabs, over a secure WebSocket connection on TCP port 443. Your network stack must allow access to the following:
- api.eu.residency.elevenlabs.io (TCP 443): voice conversation with the AI agent for Hoxhunt organizations set up in EU region (default).
- api.elevenlabs.io (TCP 443): voice conversation with the AI agent for Hoxhunt organizations set up in US region.
The lesson itself is loaded from game.hoxhunt.com and api.hoxhunt.com, which are listed above.
Static/non-interactive Deepfakes
Non-interactive deepfake videos are served from following location:
- storage.googleapis.com
Interactive Deepfakes (LiveAvatar on LiveKit)
Interactive Deepfakes are served from following location:
- api.liveavatar.com (TCP 443)
- *.livekit.cloud (TCP 443, WSS): the LiveKit signaling connection. Subdomain part syntax is heygen-[instance].livekit.cloud where [instance] is not predetermined.
Guides for commonly used proxies and VPN clients
We have gathered some resources below for some commonly used proxies and VPN clients, and how to allowlist Hoxhunt within them. If your solution is not on the list, feel free to reach out to Hoxhunt Support.
Allowlisting Blue Coat / ProxySG proxy solutions
Allowlisting Zscaler proxy solutions
Check connectivity of important domains related to Hoxhunt service
This section describes how you can perform basic low-level connectivity checks for Hoxhunt services.
Open a web browser.
Try to access the following URLs.
URL |
Purpose | Expected results |
|---|---|---|
https://ajax.aspnetcdn.com/ |
Outlook add-in framework's CDN | You should be redirected to your Microsoft Ajax Content Delivery Network page at https://dotnet.microsoft.com/en-us/apps/aspnet. |
https://appsforoffice.microsoft.com/ |
Outlook add-in framework | You should see the following error message: |
https://officejs.hoxhunt.com/ |
Hoxhunt's Outlook add-in |
You should see the following never-ending loading screen: |
https://api.hoxhunt.com/graphql |
Hoxhunt's external GraphQL API |
You should see the following message: |
https://game.hoxhunt.com/ |
Hoxhunt Training dashboard and results view |
You should see Hoxhunt login screen
|
https://app.hoxhunt.com/ |
Hoxhunt backend service |
You should see Hoxhunt login screen
|
https://auth.hoxhunt.com/ |
Hoxhunt authentication service |
You should see Hoxhunt login screen |
https://public.hoxhunt.com/ |
Hoxhunt's public CDN for serving assets | A long XML response should appear. |
| https://cdn.hoxhunt.com/ | Hoxhunt's public CDN for serving assets | You should see the following error message: |
| https://api.eu.residency.elevenlabs.io/ | Voice Phishing exercises | You should see the following message: {"detail":"Not Found"} |
| https://api.liveavatar.com/ | Interactive Deepfakes | You should see the following message: {"detail":"Not Found"} |
If any of the above return something else, please follow the instructions in the error message or make sure nothing is blocking access to the URL. Please contact your network administrator as needed.
Potential blockers include:
Proxy
Firewall
VPN
Systems policy
Check with different web browsers
Please attempt to repeat the following steps with:
Internet Explorer
Microsoft Edge
Google Chrome
Safari (on Mac only)
Check with alternative network connection
It’s always a good idea to narrow down the issue by exclusion. If possible, try to access the URLs with different network configurations:
Enable/disable VPN software
Enable/disable proxy client
Switch between LAN, Wi-Fi and mobile data connection