# apple services whitelist : https://support.apple.com^$important/en-us/101555
# example: @@|*.domain.tld^$important
# device setup
@@|albert.apple.com^$important
@@|captive.apple.com^$important
@@|gs.apple.com^$important
@@|humb.apple.com^$important
@@|static.ips.apple.com^$important
@@|sq-device.apple.com^$important
@@|tbsc.apple.com^$important
@@|time-ios.apple.com^$important
@@|time.apple.com^$important
@@|time-macos.apple.com^$important
# device mgmt
@@|*.push.apple.com^$important
@@|deviceenrollment.apple.com^$important
@@|deviceservices-external.apple.com^$important
@@|gdmf.apple.com^$important
@@|identity.apple.com^$important
@@|iprofiles.apple.com^$important
@@|mdmenrollment.apple.com^$important
@@|setup.icloud.com^$important
@@|vpp.itunes.apple.com^$important
@@|*.appattest.apple.com^$important
# business manger / school manager
@@|*.business.apple.com^$important
@@|*.school.apple.com^$important
@@|appleid.cdn-apple.com^$important
@@|idmsa.apple.com^$important
@@|*.itunes.apple.com^$important
@@|*.mzstatic.com^$important
@@|api.ent.apple.com^$important
@@|api.edu.apple.com^$important
@@|statici.icloud.com^$important
@@|*.vertexsmb.com^$important
@@|www.apple.com^$important
@@|upload.appleschoolcontent.com^$important
# employees and students
@@|ws-ee-maidsvc.icloud.com^$important
# Business Essentials device mgmt
@@|axm-adm-enroll.apple.com^$important
@@|axm-adm-mdm.apple.com^$important
@@|axm-adm-scep.apple.com^$important
@@|axm-app.apple.com^$important
@@|*.apple-mapkit.com^$important
@@|icons.axm-usercontent-apple.com^$important
# classroom and schoolwork
@@|s.mzstatic.com^$important
@@|play.itunes.apple.com^$important
@@|ws-ee-maidsvc.icloud.com^$important
@@|ws.school.apple.com^$important
@@|pg-bootstrap.itunes.apple.com^$important
@@|cls-iosclient.itunes.apple.com^$important
@@|cls-ingest.itunes.apple.com^$important
# software updates
@@|appldnld.apple.com^$important
@@|configuration.apple.com^$important
@@|gdmf.apple.com^$important
@@|gg.apple.com^$important
@@|gs.apple.com^$important
@@|ig.apple.com^$important
@@|mesu.apple.com^$important
@@|ns.itunes.apple.com^$important
@@|oscdn.apple.com^$important
@@|osrecovery.apple.com^$important
@@|skl.apple.com^$important
@@|swcdn.apple.com^$important
@@|swdist.apple.com^$important
@@|swdownload.apple.com^$important
@@|swscan.apple.com^$important
@@|updates-http.cdn-apple.com^$important
@@|updates.cdn-apple.com^$important
@@|xp.apple.com^$important
@@|gdmf-ados.apple.com^$important
@@|gsra.apple.com^$important
@@|wkms-public.apple.com^$important
@@|fcs-keys-pub-prod.cdn-apple.com^$important
# apps and additional content
@@|*.itunes.apple.com^$important
@@|*.apps.apple.com^$important
@@|*.mzstatic.com^$important
@@|itunes.apple.com^$important
@@|ppq.apple.com^$important
@@|api.apple-cloudkit.com^$important
@@|*.appattest.apple.com^$important
@@|*.apps-marketplace.apple.com^$important
@@|token.safebrowsing.apple
@@|audiocontentdownload.apple.com^$important
@@|devimages-cdn.apple.com^$important
@@|download.developer.apple.com^$important
@@|playgrounds-assets-cdn.apple.com^$important
@@|playgrounds-cdn.apple.com^$important
@@|sylvan.apple.com^$important
@@|gateway.icloud.com^$important
# carrier updates
@@|appldnld.apple.com^$important
@@|appldnld.apple.com.edgesuite.net^$important
@@|itunes.com^$important
@@|itunes.apple.com^$important
@@|updates-http.cdn-apple.com^$important
@@|updates.cdn-apple.com^$important
# content caching
@@|lcdn-registration.apple.com^$important
@@|suconfig.apple.com^$important
@@|xp-cdn.apple.com^$important
@@|lcdn-locator.apple.com^$important
@@|serverstatus.apple.com^$important
# beta updates
@@|bpapi.apple.com^$important
@@|cssubmissions.apple.com^$important
@@|fba.apple.com^$important
# apple diagnostics
@@|diagassets.apple.com^$important
# dns
@@|doh.dns.apple.com^$important
# certificate validation
@@|certs.apple.com^$important
@@|crl.apple.com^$important
@@|crl3.digicert.com^$important
@@|crl4.digicert.com^$important
@@|ocsp.apple.com^$important
@@|ocsp.digicert.cn^$important
@@|ocsp.digicert.com^$important
@@|ocsp2.apple.com^$important
@@|valid.apple.com^$important
# apple account
@@|account.apple.com^$important
@@|appleid.cdn-apple.com^$important
@@|idmsa.apple.com^$important
@@|gsa.apple.com^$important
# iCloud
@@|*.apple-cloudkit.com^$important
@@|*.apple-livephotoskit.com^$important
@@|*.apzones.com^$important
@@|*.cdn-apple.com^$important
@@|*.gc.apple.com^$important
@@|*.icloud.com^$important
@@|*.icloud.com.cn^$important
@@|*.icloud.apple.com^$important
@@|*.icloud-content.com^$important
@@|*.iwork.apple.com^$important
@@|mask.icloud.com^$important
@@|mask-h2.icloud.com^$important
@@|mask-api.icloud.com^$important
# Apple Intelligence, Siri, and Search
@@|guzzoni.apple.com^$important
@@|*.smoot.apple.com^$important
@@|apple-relay.cloudflare.com^$important
@@|apple-relay.fastly-edge.com^$important
@@|cp4.cloudflare.com^$important
@@|apple-relay.apple.com^$important
# Associated Domains
@@|app-site-association.cdn-apple.com^$important
@@|app-site-association.networking.apple^$important
# Tap to Pay on iPhone
@@|pos-device.apple.com^$important
@@|humb.apple.com^$important
@@|phonesubmissions.apple.com^$important
# ID Verifier on iPhone
@@|smp-device-content.apple.com^$important
@@|idv.cdn-apple.com^$important
@@|idv-prod1.apple.com^$important
@@|humb.apple.com^$important