My Mac Contacted 63 Different Apple Owned Domains in One Hour - While Not is Use

During a one hour period today, my computer contacted 63 different Apple domains while i was not logged on and using it.

I have been trying to minimize to the extent possible the reach of big tech into my life. A full 25% of the DNS queries from one of my computers (M2 MBA with macOS 15.4) are to Apple owned domains - even though my DNS provider (NextDNS) blocks Apple's native telemetry. Additionally, since I do not use Apple for my mail, contacts, calendars, podcasts or news, I already have the routes to those Apple services blacklisted.

Interestingly, my 2019 Intel MBP with the same DNS settings has less than 3% of it's DNS queries hitting Apple domains.

Here are the domains Apple contacted during one 60-Minute Period When I Was Not Using My Computer

One Hour - 63 Apple Domains

• 1-courier.push.apple.com - Apple Push Notification Service
• 1-courier.sandbox.push.apple.com - Apple Push Notification Service
• api.apple-cloudkit.com - CloudKit, Apple's backend service for developers to store and sync app data
• api.apple-cloudkit.fe2.apple-dns.net - DNS/gateway services for Apple's infrastructure
• app-site-association.cdn-apple.com - Used for Universal Links
• apple-relay.cloudflare.com
• apple.com - Core Apple websites
• bag.itunes.apple.com - iTunes/App Store purchase container
• configuration.apple.com - for fetching various system configurations, including location services
• configuration.ls.apple.com - for fetching various system configurations, including location services
• cts.cdn-apple.com - CDN for network content
• entitlements.itunes.apple.com - Checks your entitlements for apps and content
• fbs.smoot.apple.com - for crash reports, analytics, or user feedback.
• fpinit.itunes.apple.com - Initialization for iTunes/App Store services
• gateway.fe2.apple-dns.net - DNS/gateway services for Apple's infrastructure
• gdmf.apple.com - Device Management Framework
• gsa.apple.com - Apple ID (IDMS) and Game Center Services (GSAS)
• gsa.idms-apple.com.akadns.net - Apple ID (IDMS) and Game Center Services (GSAS)
• gsas.apple.com - Apple ID (IDMS) and Game Center Services (GSAS)
• gsas.idms-apple.com.akadns.net - Apple ID (IDMS) and Game Center Services (GSAS)
• gspe1-ssl.ls.apple.com - related to Location Services (LS) and certificate validation (SSL)
• gspe35-ssl.ls.apple.com - related to Location Services (LS) and certificate validation (SSL)
• iadsdk.apple.com - Apple's iAd advertising network SDK
• init-p01md.apple.com
• init.ess.apple.com - Apple's Entitlement Services
• init.itunes.apple.com - Initialization for iTunes/App Store services
• kt-prod.ess.apple.com - Apple's Entitlement Services
• lcdn-registration.apple.com - related to Software Update and (CDN) registration
• musicstatus.itunes.apple.com - For checking the status of Apple Music or iTunes Match
• ocsp2.apple.com - Online Certificate Status Protocol
• p44-buy-lb.itunes-apple.com.akadns.net - related to the iTunes Store and App Store purchase
• p44-buy.itunes.apple.com - related to the iTunes Store and App Store purchase
• pancake.apple.com - telemetry
• pd.itunes.apple.com - related to the iTunes Store and App Store purchase
• proxy.safeBrowse.apple - for Apple's Safari Fraudulent Website Warning (Safe Browse)
• sandbox.itunes-apple.com.akadns.net - used by developers for testing in-app purchases
• sandbox.itunes.apple.com - used by developers for testing in-app purchases
• sas-uw2-pcms.apple.com - related to purchase or content management systems within Apple's retail or media ecosystem.
• sas.pcms.apple.com - related to purchase or content management systems within Apple's retail or media ecosystem.
• setup.fe2.apple-dns.net - DNS/gateway services for Apple's infrastructure
• st11p01su-lcdnreg.isu.apple.com.akadns.net - related to Software Update and (CDN) registration
• suconfig.apple.com - related to Software Update and (CDN) registration
• swallow-apple-com.v.aaplimg.com - related to content delivery or image services
• swallow.apple.com - related to content delivery or image services
• testflight.apple.com - for TestFlight, Apple's platform for beta testing apps
• time.apple.com - Network Time Protocol
• token.safeBrowse.apple - for Apple's Safari Fraudulent Website Warning (Safe Browse)
• us-ne-courier-4.push-apple.com.akadns.net - Apple Push Notification Service
• us-sandbox-courier-4.push-apple.com.akadns.net - Apple Push Notification Service
• use1-wps-prod.apple.com
• weatherkit.apple.com
• wps.apple.com
• www.apple.com - Core Apple websites
• xp.apple.com - telemetry
• gateway.icloud.com
• p177-content.icloud.com
• edge-062.usatl5.icloud-content.com
• p104-content.icloud.com
• setup.icloud.com
• p150-content.icloud.com
• p176-content.icloud.com
• p101-content.icloud.com
• mask-api.icloud.com

Apple Domains I Already Block

• apple.news
• apple.tv
• podcasts.apple.com
• siri.apple.com
• caldav.icloud.com
• contacts.icloud.com
• mask.apple-dns.net
• mask-api.icloud.com
• doh.dns.apple.com.v.aaplimg.com
• doh.dns.apple.com
• apple-relay.cloudflare.com
• mask-canary.icloud.com
• mask-h2.icloud.com
• mask.icloud.com
• p120-caldav.icloud.com