Use this table as a quick network dependency inventory for the Web SDK ecosystem. It identifies each external connection the code may make, explains why it is used, shows whether that connection is mandatory or conditional, and classifies it as first-party (Incode-owned domains) or third-party (vendor/external services). This helps with security/privacy reviews, vendor risk assessments, compliance documentation, and environment hardening by making it clear which integrations are required versus optional.
| Connection | Description | Party |
|---|---|---|
cdn.incodesmile.com |
Hosts SDK WASM kit, FFmpeg assets, and translation fallback assets. | First-party |
sdk.incode.com |
Serves SDK tutorial/static assets. | First-party |
fingerprint.incodesmile.com |
FingerprintJS Pro endpoint + loader host. | First-party |
demo-aps.incodesmile.com |
Darwinium profiling script host. | First-party |
incode-production.firebaseapp.com |
Firebase app/auth domain used by raffle integration. | First-party |
incode-production.firebaseio.com |
Firebase Realtime DB endpoint used by raffle integration. | First-party |
api.i18nexus.com |
Primary translations API for localization files. | Third-party |
cdnjs.cloudflare.com |
Serves PDF.js worker. | Third-party |
cdn.jsdelivr.net |
Serves Lottie player script. | Third-party |
ingest.us.sentry.io |
Sentry error/telemetry ingestion. | Third-party |
api.ipify.org |
Public IP lookup for fingerprint enrichment. | Third-party |
api.sardine.ai |
Sardine risk SDK loader (production). | Third-party |
api.sandbox.sardine.ai |
Sardine risk SDK loader (sandbox). | Third-party |
cdn.belvo.io |
Belvo widget script host. | Third-party |
static.opentok.com |
OpenTok browser SDK script host. | Third-party |
featureassets.org |
External asset host observed in network activity, not directly referenced. Used by Statsig | Third-party |
prodregistryv2.org |
External asset host observed in network activity, not directly referenced. Used by Statsig | Third-party |
static.opentok.com |
OpenTok browser SDK script loaded for conferencing/video functionality. | Third-party |