Whitelist.txt

##
# ABOUT
# The goal of this whitelist is a simple and maintainable list of domains that must be unblocked for the functionality of common APIs, apps and services but WITHOUT allowing telemetry or data collection about the user.
# This is mainly used by us but we are sharing it with anyone that wants to use it. I found other whitelists unsuitable - primarily ude to strange things unblocked, no comments, etc.
##


# Required for: ESPN Watch
fpdownload.adobe.com 
entitlement.auth.adobe.com 
livepassdl.conviva.com
www.espn.com
a1.espncdn.com
a2.espncdn.com
a.espncdn.com
streams.adobeprimetime.com
sp.auth.adobe.com
media.video-cdn.espn.com
cdn1.espn.net


# Require for: Facebook Messenger, including Business Page Messenger
scontent-atl3-1.xx.fbcdn.net
static.xx.fbcdn.net
edge-chat.messenger.com
video.xx.fbcdn.net
messenger.com


# Required for: Instagram
c10r.instagram.com
instagram.c10r.instagram.com
i.instagram.com
instagram.com


# Required for: Twitch
countess.twitch.tv
pubsub-edge.twitch.tv
cdn-gl.imrworldwide.com


# Required for: Plex
tvdb2.plex.tv
dashboard.plex.tv
staging.plex.tv
status.plex.tv
proxy.plex.bz
proxy.plex.tv
proxy02.pop.ord.plex.bz
o1.email.plex.tv
o2.sg0.plex.tv
pubsub.plex.bz
pubsub.plex.tv
tvthemes.plexapp.com
cpms.spop10.ams.plex.bz
cpms35.spop10.ams.plex.bz


##
# General Whitelist for Common Apps and Services
##
akamaihd.net
akamaitechnologies.com
akamaized.net
amazonaws.com
api.ipify.org
api.rlje.net
app-api.ted.com
appleid.apple.com
apt.sonarr.tv
aspnetcdn.com
ax.phobos.apple.com.edgesuite.net
brightcove.net
cdn.cloudflare.net
cdn.embedly.com
cdn.optimizely.com
cdn.vidible.tv
cdn2.optimizely.com
cdn3.optimizely.com
cdnjs.cloudflare.com
clientconfig.passport.net
cws.conviva.com
d2c8v52ll5s99u.cloudfront.net
d2gatte9o95jao.cloudfront.net
dataplicity.com
delivery.vidible.tv
dev.virtualearth.net
display.ugc.bazaarvoice.com
dl.dropbox.com
dl.dropboxusercontent.com
download.sonarr.tv
drift.com
driftt.com
dynupdate.no-ip.com
ecn.dev.virtualearth.net
edge.api.brightcove.com
forums.sonarr.tv
geo3.ggpht.com
gfwsl.geforce.com
giphy.com
gravatar.com
hls.ted.com
i.ytimg.com
i1.ytimg.com
img.vidible.tv
imgix.net
imgs.xkcd.com
intercom.io
jquery.com
jsdelivr.net
keystone.mwbsys.com
lastfm-img2.akamaized.net
livepassdl.conviva.com
meta-db-worker02.pop.ric.plex.bz
meta.plex.bz
meta.plex.tv
my.plexapp.com
nine.plugins.plexapp.com
no-ip.com
node.plexapp.com
ns1.dropbox.com
ns2.dropbox.com
ocsp.apple.com
om.cbsi.com
pings.conviva.com
placehold.it
placeholdit.imgix.net
players.brightcove.net
res.cloudinary.com
s.marketwatch.com
s.youtube.com
s.ytimg.com
s1.wp.com
s2.youtube.com
s3.amazonaws.com
sa.symcb.com
secure.avangate.com
secure.brightcove.com
secure.surveymonkey.com
services.sonarr.tv
skyhook.sonarr.tv
spclient.wg.spotify.com
ssl.p.jwpcdn.com
t0.ssl.ak.dynamic.tiles.virtualearth.net
t0.ssl.ak.tiles.virtualearth.net
tawk.to
tedcdn.com
themoviedb.com
thetvdb.com
traffic.libsyn.com
twimg.com
videos.vidible.tv
vidtech.cbsinteractive.com
widget-cdn.rpxnow.com
wp.com
ws.audioscrobbler.com
www.dataplicity.com
yt3.ggpht.com
zee.cws.conviva.com
# Not needed because they shouldn't be blocked anyways
#raw.githubusercontent.com
#tinyurl.com
#t.co
#github.com
#github.io


##
# REQUIRED FOR: GOOGLE APIs AND SERVICES CONNECTIVITY
##
# General Google API Connectivity
waa-pa.googleapis.com
speechs3proto2-pa.googleapis.com
clientservices.googleapis.com
safebrowsing.googleapis.com
searchlabspartnerservice-pa.googleapis.com
federatedcompute-pa.googleapis.com
ondevicesafety-pa.googleapis.com
youtubei.googleapis.com
mobileconfiguration-pa.googleapis.com
proactivebackend-pa.googleapis.com
googlehomefoyer-pa.googleapis.com
xgapromomanager-pa.googleapis.com
www.googleapis.com
connectivitycheck.android.com
connectivitycheck.gstatic.com
cse.google.com
gstatic.com
0.client-channel.google.com
clients1.google.com
clients2.google.com
clients3.google.com
clients4.google.com
clients5.google.com
clients6.google.com
oauthaccountmanager.googleapis.com
discover-pa.googleapis.com

# Android API
2.android.pool.ntp.org
instantmessaging-pa.googleapis.com
android.clients.google.com
appsbackup-pa.clients6.google.com
appsbackup-pa.googleapis.com
googleapis.com
appspot-preview.l.google.com

# Google Assistant API
geller-pa.googleapis.com

# Google Play Store API
android.clients.google.com
firebaseinstallations.googleapis.com

# Google Keep API
firestore.googleapis.com
reminders-pa.googleapis.com

# Google Fonts API
gstaticadssl.l.google.com

# Gmail API
googleapis.l.google.com

# Chrome API
dl.google.com

# Google TV and Android Tv API
redirector.gvt1.com
redirector.gvt2.com
androidtvlauncherxfe-pa.googleapis.com

# YouTube API
youtubei.googleapis.com
youtube-pa-googleapis.com
s.youtube.com 
youtube-nocookie.com
video-stats.l.google.com
www.youtube-nocookie.com
youtu.be
manifest.googlevideo.com

# Google Maps and Google Earth API
dev.virtualearth.net
ecn.dev.virtualearth.net
t0.ssl.ak.dynamic.tiles.virtualearth.net
t0.ssl.ak.tiles.virtualearth.net
maps.google.com
earth.google.om
maps-pa.googleapsi.com

# Google Maps - Timeline and Send Location Feature API
semanticlocation-pa.googleapis.com
userlocation.googleapis.com


##
# REQUIRED FOR: MICROSOFT APIs AND SERVICES CONNECTIVITY
##
# General Microsoft APIs and Endpoints required for their services (no telemetry)
nleditor.osi.office.net
ecs.office.com
storage.live.com
admin.onedrive.com
officeclient.microsoft.com
spoprod-a.akamaihd.net
*.lync.com
*.sfbassets.com
*.urlp.sfbassets.com
skypemaprdsitus.trafficmanager.net
*.keydelivery.mediaservices.windows.net
*.msecnd.net
*.streaming.mediaservices.windows.net
ajax.aspnetcdn.com
mlccdn.blob.core.windows.net
aka.ms
amp.azure.net
*.users.storage.live.com
*.msedge.net
compass-ssl.microsoft.com
*.tenor.com
ajax.aspnetcdn.com
spoprod-a.akamaihd.net
*.api.microsoftstream.com
*.notification.api.microsoftstream.com
api.microsoftstream.com
web.microsoftstream.com
*.azureedge.net
*.media.azure.net
*.officeapps.live.com
*.online.office.com
office.live.com
*.office.net
*.msftidentity.com
*.msidentity.com
account.activedirectory.windowsazure.com
accounts.accesscontrol.windows.net
adminwebservice.microsoftonline.com
api.passwordreset.microsoftonline.com
autologon.microsoftazuread-sso.com
becws.microsoftonline.com
clientconfig.microsoftonline-p.net
companymanager.microsoftonline.com
device.login.microsoftonline.com
graph.microsoft.com
graph.windows.net
nexus.microsoftonline-p.com
passwordreset.microsoftonline.com
provisioningapi.microsoftonline.com
*.manage.office.com
*.protection.office.com
manage.office.com
protection.office.com
*.portal.cloudappsecurity.com
account.office.net
admin.microsoft.com
home.office.com
portal.office.com
www.office.com
suite.office.net
mlccdn.blob.core.windows.net

# SharePoint
*.sharepointonline.com
cdn.sharepointonline.com
privatecdn.sharepointonline.com
publiccdn.sharepointonline.com
static.sharepointonline.com


# Teams
teams.microsoft.com
*.teams.microsoft.com

# OneNote
*.onenote.com
*cdn.onenote.net

# Skype
ui.skype.com
apps.skype.com
apps.skype.com
pricelist.skype.com
*.skypeforbusiness.com
*.broadcast.skype.com
broadcast.skype.com
*.skype.com

# Microsoft Updates and Windows Store Functionality
displaycatalog.mp.microsoft.com
dl.delivery.mp.microsoft.com
continuum.dds.microsoft.com
c.s-microsoft.com
geo-prod.do.dsp.mp.microsoft.com

# Windows Settings Sync
settings-win.data.microsoft.com

# Windows Location API
inference.location.live.net

# Required for: Microsoft Windows Spotlight API
# Including downloading or updating spotlight images.
arc.msn.com

# Microsoft Login
live.com
microsoftonline.com
login.live.com
login.microsoft.com
login.microsoftonline.com
login.microsoftonline-p.com
login.windows.net
logincert.microsoftonline.com
loginex.microsoftonline.com
login-us.microsoftonline.com
logincdn.msauth.net

# Microsoft Windows Connect Tests 
# Blocking these can cause Windows to act strange and think it's not connected to the internet
dns.msftncsi.com
msftncsi.com
www.msftconnecttest.com
www.msftncsi.com
win10.ipv6.microsoft.com
# I thought Microsoft said they were only using their .microsoft tld for Office, 365, and URLs that mattered in face of the user?
# I hardly think connectivity tests falls under this.
connectivity-test.static.microsoft
connectivity-test.usercontent.microsoft
connectivity-test.cloud.microsoft

# OneDrive
g.live.com
onedrive.live.com
oneroute.microsoft.com
1drv.com
1drv.ms
onedrive.ms

# Microsoft Outlook (Email)
outlook.live.com
outlook.office365.com
s.gateway.messenger.live.com
outlook.office.com
*.outlook.office.com
smtp.office365.com
r1.res.office365.com
r3.res.office365.com
r4.res.office365.com
*.outlook.com
*.outlook.office.com
attachments.office.net
*.protection.outlook.com
*.mail.protection.outlook.com

# Microsoft Your Phone Sync
mobile.pipe.aria.microsoft.com

# Office, O365, and Enterprise Functionality
#self.events.data.microsoft.com
office.com
office.net
office365.com
officeclient.microsoft.com
nexusrules.officeapps.live.com
1drv.com
enterprise.activity.windows.com
outlook.office365.com
products.office.com
c.s-microsoft.com
i.s-microsoft.com

# Xbox Functionality - Found on Reddit
attestation.xboxlive.com
cert.mgt.xboxlive.com
def-vef.xboxlive.com
device.auth.xboxlive.com
eds.xboxlive.com
help.ui.xboxlive.com
licensing.xboxlive.com
notify.xboxlive.com
title.auth.xboxlive.com
title.mgt.xboxlive.com
v10.vortex-win.data.microsoft.com
www.msftncsi.com
www.xboxlive.com
xbox.ipv6.microsoft.com
xboxexperiencesprod.experimentation.xboxlive.com
xflight.xboxlive.com
xkms.xbolive.com
xkms.xboxlive.com
xsts.auth.xboxlive.com

# Xbox - Other
client-s.gateway.messenger.live.com

# Microsoft Updates and Windows Store
dl.delivery.mp.microsoft.com
geo-prod.do.dsp.mp.microsoft.com
displaycatalog.mp.microsoft.com
update.microsoft.com.akadns.net
sls.update.microsoft.com.akadns.net
fe3.delivery.dsp.mp.microsoft.com.nsatc.net
tlu.dl.delivery.mp.microsoft.com
ctldl.windowsupdate.com
sls.update.microsoft.com

# Microsoft Your Phone Sync
mobile.pipe.aria.microsoft.com