.

allowlist.txt

@@ -176,31 +176,48 @@ dualstack.dropout-sip.iws-prod.amazon.com
 
 
 # -----------------------------------------
-# 🍎 Apple
+# 🍎 Apple App Store – explizite Allowlist
 # -----------------------------------------
-# Store / Experience
+# App Store / XP (Layouts, Startseite, Inhalte)
 xp.apple.com
 xp.itunes-apple.com.akadns.net
+xp-cdn-lb.itunes-apple.com.akadns.net
 xp.v.aaplimg.com
 
+# Kaufen / Commerce
+buy.itunes.apple.com
+buy.itunes-apple.com.akadns.net
+buy-lb.itunes-apple.com.akadns.net
 
-# Geo / Region
+# App-Assets / Bilder / App-Seiten (CDN)
+apps-mzstatic-cdn.itunes-apple.com.akadns.net
+apps-mzstatic-lb.itunes-apple.com.akadns.net
+h3.media.apple.map.fastly.net
+
+# „BAG“ / Config-Payloads (App Store APIs/Schalter/Endpoints)
+bag-cdn.itunes-apple.com.akadns.net
+bag-cdn-lb.itunes-apple.com.akadns.net
+h3.apis.apple.map.fastly.net
+
+# Login/Store Services (Apple-ID/Services, in deinen Logs sichtbar)
+gsp-ssl.ls.apple.com
+configuration-lb.ls-apple.com.akadns.net
+configuration.ls.v.aaplimg.com
 gs-loc.apple.com
 
-# Apple ID / Session
+amp-api-edge-cdn-lb.itunes-apple.com.akadns.net
-init.ess.apple.com
+amp-api-apps-akam.itunes-apple.com.akadns.net
-profile.ess.apple.com
+amp-api-search-edge-apps-akam.itunes-apple.com.akadns.net
 
-# Fraud / Payment
-afs.ampaeservices.com
-
-# Service Provider Endpoints
-gsp-ssl.ls.apple.com
-gspe1-ssl.ls.apple.com
-gspe85-ssl.ls.apple.com
 
+tr.iadsdk.apple.com
+mask.icloud.com
+mask-h2.icloud.com
+gsp-ssl.ls-apple.com.akadns.net
+configuration.ls.apple.com
 # -----------------------------------------
 
+
 # -----------------------------------------