.

allowlist.txt

@@ -176,19 +176,48 @@ dualstack.dropout-sip.iws-prod.amazon.com
 
 
 # -----------------------------------------
-# 🍎 Apple
+# 🍎 Apple App Store – explizite Allowlist
 # -----------------------------------------
-*.ls.apple.com
-gs-loc.apple.com
+# App Store / XP (Layouts, Startseite, Inhalte)
 xp.apple.com
-configuration.apple.com
-gdmf.apple.com
-*.itunes-apple.com
-*.ampaeservices.com
-cl3.apple.com
-*.ess.apple.com
-init.ess.apple.com
-profile.ess.apple.com
+xp.itunes-apple.com.akadns.net
+xp-cdn-lb.itunes-apple.com.akadns.net
+xp.v.aaplimg.com
+
+# Kaufen / Commerce
+buy.itunes.apple.com
+buy.itunes-apple.com.akadns.net
+buy-lb.itunes-apple.com.akadns.net
+
+# App-Assets / Bilder / App-Seiten (CDN)
+apps-mzstatic-cdn.itunes-apple.com.akadns.net
+apps-mzstatic-lb.itunes-apple.com.akadns.net
+h3.media.apple.map.fastly.net
+
+# „BAG“ / Config-Payloads (App Store APIs/Schalter/Endpoints)
+bag-cdn.itunes-apple.com.akadns.net
+bag-cdn-lb.itunes-apple.com.akadns.net
+h3.apis.apple.map.fastly.net
+
+# Login/Store Services (Apple-ID/Services, in deinen Logs sichtbar)
+gsp-ssl.ls.apple.com
+configuration-lb.ls-apple.com.akadns.net
+configuration.ls.v.aaplimg.com
+gs-loc.apple.com
+
+amp-api-edge-cdn-lb.itunes-apple.com.akadns.net
+amp-api-apps-akam.itunes-apple.com.akadns.net
+amp-api-search-edge-apps-akam.itunes-apple.com.akadns.net
+
+
+tr.iadsdk.apple.com
+mask.icloud.com
+mask-h2.icloud.com
+gsp-ssl.ls-apple.com.akadns.net
+configuration.ls.apple.com
+# -----------------------------------------
+
+
 # -----------------------------------------