# Commonly Whitelisted Domains

**URL:** <https://discourse.pi-hole.net/t/commonly-whitelisted-domains/212>\
**Category:** FAQs\
**Tags:** whitelisting\
**Created:** [October 18, 2016, 5:28pm UTC](https://discourse.pi-hole.net/t/commonly-whitelisted-domains/212 "2016-10-18T17:28:56Z")\
**Posts on this page:** 20\
**Page:** 1

<div class="post-metadata">

**Author:** ![system](https://discourse.pi-hole.net/uploads/default/original/3X/7/c/7c8792f649eeb921c5d2b4c41564ffa873d9a2b8.png) [@system](https://discourse.pi-hole.net/u/system)\
**Post date:** [October 18, 2016, 5:28pm UTC](https://discourse.pi-hole.net/t/commonly-whitelisted-domains/212/1 "2016-10-18T17:28:56Z")

</div>

This post is a wiki post. _Anybody_ can edit it to provide useful tips for whitelisting. Editing abuse may result in a ban from the forums!

## Whitelisting Tips

List any tips you've discovered on how or what to whitelist in order to solve specific issues!

# Google (Maps, Youtube, etc)

## Google Maps and other Google services

```auto
pihole allow clients4.google.com 
pihole allow clients2.google.com

```

## YouTube history

```auto
pihole allow s.youtube.com 
pihole allow video-stats.l.google.com

```

## YouTube App for iOS

```auto
pihole allow www.googleapis.com 
pihole allow youtubei.googleapis.com
pihole allow oauthaccountmanager.googleapis.com

```

## Google Play

As described [here](https://www.reddit.com/r/pihole/comments/6r79k6/google_play_store_been_blocked/).

```auto
pihole allow android.clients.google.com

```

## Google Keep

The Google Keep Chrome App requires these domains to be whitelisted in order to sync.

```auto
pihole allow reminders-pa.googleapis.com firestore.googleapis.com

```

## Google Fonts

```auto
pihole allow gstaticadssl.l.google.com

```

## Gmail (Google Mail)

iOS app requires this to be whitelisted for the app to connect.

```auto
pihole allow googleapis.l.google.com

```

## Google Chrome (to update on ubuntu)

```auto
pihole allow dl.google.com

```

## Android TV

```auto
pihole allow redirector.gvt1.com

```

## Push Notification

Domain is needed, so that Push Notifications work properly for some Andoid Apps like WhatsApp. If it is blocked the notifications only appear after manually opening the app.

```auto
pihole allow mtalk.google.com

```

or as a regex to whitlist all of its kind.

```auto
pihole --allow-regex "^((alt)[0-9](-))?mtalk\.google\.com$"

```

## Allow all Google Domains listed above (regex still needs to be imported in a seperate command, due to it needing a different flag)

```auto
pihole allow clients4.google.com clients2.google.com s.youtube.com video-stats.l.google.com www.googleapis.com
 youtubei.googleapis.com oauthaccountmanager.googleapis.com android.clients.google.com reminders-pa.googleapis.com fires
tore.googleapis.com gstaticadssl.l.google.com googleapis.l.google.com dl.google.com redirector.gvt1.com

```

# Microsoft (Windows, Office, Skype, etc)

## Windows uses this to verify connectivity to Internet

```auto
pihole allow www.msftncsi.com www.msftconnecttest.com

```

## Microsoft Web Pages (Outlook, Office365, Live, Microsoft.com...)

```auto
pihole allow outlook.office365.com products.office.com c.s-microsoft.com i.s-microsoft.com login.live.com login.microsoftonline.com 

```

## Backup bitlocker recovery key to Microsoft account

```auto
pihole allow g.live.com

```

## Microsoft Store (Windows Store)

```auto
pihole allow dl.delivery.mp.microsoft.com geo-prod.do.dsp.mp.microsoft.com displaycatalog.mp.microsoft.com

```

## Windows 10 Update

```auto
pihole allow sls.update.microsoft.com.akadns.net fe3.delivery.dsp.mp.microsoft.com.nsatc.net tlu.dl.delivery.mp.microsoft.com

```

## Microsoft Edge Browser Update

```auto
pihole allow msedge.api.cdp.microsoft.com

```

## Xbox Live

This domain is used for sign-ins, creating new accounts, and recovering existing Microsoft accounts on your (confirmed by Microsoft)

```auto
pihole allow clientconfig.passport.net 

```

### Xbox Live Achievements (confirmed by Microsoft)

```auto
pihole allow v10.events.data.microsoft.com
pihole allow v20.events.data.microsoft.com

```

### Xbox Live Messaging ([post](https://discourse.pi-hole.net/t/commonly-whitelisted-domains/212/29))

```auto
pihole allow client-s.gateway.messenger.live.com

```

### Store App on Series X/S

```auto
pihole allow arc.msn.com

```

### EA Play on Xbox

```auto
pihole allow activity.windows.com

```

### Full Functionality

There are several domains discovered initially [on Reddit](https://www.reddit.com/r/xboxone/comments/5khrrl/achievements_not_unlocking/) and [/r/xboxone](https://www.reddit.com/r/xboxone/comments/5l7bm1/tech_piholeother_dns_users_additional_whitelist/), which were also confirmed by Microsoft as being required by Xbox Live for full functionality.

```auto
pihole allow xbox.ipv6.microsoft.com device.auth.xboxlive.com www.msftncsi.com title.mgt.xboxlive.com xsts.auth.xboxlive.com title.auth.xboxlive.com ctldl.windowsupdate.com attestation.xboxlive.com xboxexperiencesprod.experimentation.xboxlive.com xflight.xboxlive.com cert.mgt.xboxlive.com xkms.xboxlive.com def-vef.xboxlive.com notify.xboxlive.com help.ui.xboxlive.com licensing.xboxlive.com eds.xboxlive.com www.xboxlive.com v10.vortex-win.data.microsoft.com settings-win.data.microsoft.com

```

## Skype

[See the GitHub Topic](https://github.com/pi-hole/pi-hole/issues/380#issuecomment-195977839) on these domains.

```auto
pihole allow s.gateway.messenger.live.com client-s.gateway.messenger.live.com ui.skype.com pricelist.skype.com apps.skype.com m.hotmail.com sa.symcb.com s{1..5}.symcb.com 

```

## Microsoft Office

Reddit link - [r/pihole - MS Office issues](https://www.reddit.com/r/pihole/comments/5eq4on/problems_with_microsoft_office/)

```auto
pihole allow officeclient.microsoft.com

```

## Bing Maps Platform

as described [here](https://github.com/anudeepND/whitelist/issues/18).

```auto
pihole allow dev.virtualearth.net ecn.dev.virtualearth.net t0.ssl.ak.dynamic.tiles.virtualearth.net t0.ssl.ak.tiles.virtualearth.net

```

# Apple

## Apple Music

```auto
pihole allow itunes.apple.com
pihole allow s.mzstatic.com

```

## Apple ID

```auto
pihole allow appleid.apple.com

```

## iOS Weather app

```auto
pihole allow gsp-ssl.ls.apple.com
pihole allow gsp-ssl.ls-apple.com.akadns.net

```

# Captive-portal tests

These domains are checked by the operating systems when connecting via wifi, and if they don't get the response they expect, they may try to open a wifi login page or similar as they believe they are located behind a captive portal.

## Android/Chrome

```auto
pihole allow connectivitycheck.android.com android.clients.google.com clients3.google.com connectivitycheck.gstatic.com 

```

## Windows/Microsoft

```auto
pihole allow msftncsi.com www.msftncsi.com ipv6.msftncsi.com

```

## iOS/Apple

(note that this does not cover all domains used older iOS versions)

```auto
pihole allow captive.apple.com gsp1.apple.com www.apple.com www.appleiphonecell.com

```

# Other

## Jackbox.tv

Jackbox.tv will not load unless you whitelist google-analytics. As of [October 2020](https://discourse.pi-hole.net/t/commonly-whitelisted-domains/212/87), this may no longer be necessary.

```auto
pihole allow www.google-analytics.com
pihole allow ssl.google-analytics.com

```

## Spotify

The Spotify app for iOS will stop functioning unless it's web service counterpart is whitelisted.

```auto
pihole allow spclient.wg.spotify.com apresolve.spotify.com

```

For spotify to work on TVs the API might need whitelisted:

```auto
pihole allow api-tv.spotify.com

```

## Target's Weekly Ads

```auto
pihole allow weeklyad.target.com m.weeklyad.target.com weeklyad.target.com.edgesuite.net

```

## Facebook, Facebook Messenger

```auto
pihole allow upload.facebook.com creative.ak.fbcdn.net external-lhr0-1.xx.fbcdn.net external-lhr1-1.xx.fbcdn.net external-lhr10-1.xx.fbcdn.net external-lhr2-1.xx.fbcdn.net external-lhr3-1.xx.fbcdn.net external-lhr4-1.xx.fbcdn.net external-lhr5-1.xx.fbcdn.net external-lhr6-1.xx.fbcdn.net external-lhr7-1.xx.fbcdn.net external-lhr8-1.xx.fbcdn.net external-lhr9-1.xx.fbcdn.net fbcdn-creative-a.akamaihd.net scontent-lhr3-1.xx.fbcdn.net scontent.xx.fbcdn.net scontent.fgdl5-1.fna.fbcdn.net graph.facebook.com b-graph.facebook.com connect.facebook.com cdn.fbsbx.com api.facebook.com edge-mqtt.facebook.com mqtt.c10r.facebook.com portal.fb.com star.c10r.facebook.com star-mini.c10r.facebook.com b-api.facebook.com fb.me bigzipfiles.facebook.com l.facebook.com www.facebook.com scontent-atl3-1.xx.fbcdn.net static.xx.fbcdn.net edge-chat.messenger.com video.xx.fbcdn.net external-ort2-1.xx.fbcdn.net scontent-ort2-1.xx.fbcdn.net edge-chat.facebook.com scontent-mia3-1.xx.fbcdn.net web.facebook.com rupload.facebook.com l.messenger.com

```

## DirectTV

Sourced from [here](https://www.reddit.com/r/pihole/comments/5qxjax/anyone_have_directvnow_working_with_pihole/).

```auto
pihole allow directvnow.com directvapplications.hb.omtrdc.net s.zkcdn.net js.maxmind.com

```

## Bild DE

```auto
pihole allow www.asadcdn.com code.bildstatic.de de.ioam.de json.bild.de script.ioam.de tags.tiqcdn.com tagger.opecloud.com

```

## Spiegel DE

```auto
pihole allow image.angebote.spiegel.de

```

## Plex Domains

```auto
pihole allow plex.tv tvdb2.plex.tv pubsub.plex.bz proxy.plex.bz proxy02.pop.ord.plex.bz cpms.spop10.ams.plex.bz meta-db-worker02.pop.ric.plex.bz meta.plex.bz tvthemes.plexapp.com.cdn.cloudflare.net tvthemes.plexapp.com 106c06cd218b007d-b1e8a1331f68446599e96a4b46a050f5.ams.plex.services meta.plex.tv cpms35.spop10.ams.plex.bz proxy.plex.tv metrics.plex.tv pubsub.plex.tv status.plex.tv www.plex.tv node.plexapp.com nine.plugins.plexapp.com staging.plex.tv app.plex.tv o1.email.plex.tv o2.sg0.plex.tv dashboard.plex.tv

```

### Domains used by Plex

```auto
pihole allow gravatar.com # custom login pictures
pihole allow thetvdb.com # metadata for tv series
pihole allow themoviedb.com # metadata for movies
pihole allow chtbl.com # iHeart radio/Plex Podcast

```

## Sonarr

```auto
pihole allow services.sonarr.tv skyhook.sonarr.tv download.sonarr.tv apt.sonarr.tv forums.sonarr.tv

```

## Placehold.it (Image placeholders often used during web design. Not sure why this is even blocked in the first place.)

```auto
pihole allow placehold.it placeholdit.imgix.net

```

## Dropbox

As described [here](https://www.reddit.com/r/pihole/comments/6fer0z/for_anyone_who_cant_seem_to_download_dropbox_files/):

```auto
pihole allow dl.dropboxusercontent.com ns1.dropbox.com ns2.dropbox.com

```

## Fox News

as described [here](https://discourse.pi-hole.net/t/cant-watch-fox-news-live/1563/3).

```auto
pihole allow widget-cdn.rpxnow.com

```

## Images on Marketwatch.com

```auto
pihole allow s.marketwatch.com

```

## GoDaddy webmail buttons

```auto
pihole allow imagesak.secureserver.net

```

## WatchESPN

as described [here](https://www.reddit.com/r/pihole/comments/4p1cdh/watchespn/d4kaz07/).

```auto
pihole allow fpdownload.adobe.com entitlement.auth.adobe.com livepassdl.conviva.com

```

## NVIDIA GeForce Experience

[GFE requires this](https://www.reddit.com/r/pihole/comments/7n0es7/geforce_experience_features_blocked/) to download driver updates (or events.gfe.nvidia.com, but that is also used for telemetry).

```auto
pihole allow gfwsl.geforce.com

```

## Videos not playing in times.com and nydailynews.com

```auto
pihole allow delivery.vidible.tv img.vidible.tv videos.vidible.tv edge.api.brightcove.com cdn.vidible.tv

```

## Videos not playing in NCAA March Madness App

```auto
pihole allow live-manifests-aka.warnermediacdn.com

```

## Videos not playing on weather.com

```auto
pihole allow v.w-x.co

```

## Moto phones OS updates

```auto
pihole allow appspot-preview.l.google.com

```

## Grand Theft Auto V Online PC

Since March blocking Rockstar telemetry seems to crash GTAOnline.  
Unblocking the domain fixed crashing for people at [GTA Forums](https://gtaforums.com/topic/907162-crashing-after-new-updates/).

```auto
pihole allow prod.telemetry.ros.rockstargames.com

```

## Chevrolet

Couldn't browse inventory w/o whitelisting

```auto
pihole allow chevrolet.com

```

## Epic Games Store

The tracking domain is required to make a purchase on the website, otherwise the order modal will appear to be loading forever.  
It is also required when logging into the Epic Launcher when using two-factor authentication.

```auto
pihole allow tracking.epicgames.com

```

## Origin (Savegame-Sync)

```auto
pihole allow cloudsync-prod.s3.amazonaws.com

```

## Red Hat Online Learning (subscription required)

embedded video player  
When blocked, video would play; however, not show progress (continually showing it was loading) and thus not record your progression through the video in the course progress tracker.

```auto
pihole allow 79423.analytics.edgekey.net

```

## Lowe's Checkout

Clicking "Start Secure Checkout" from the Shopping Cart on Lowe's website does not load anything.

```auto
pihole allow assets.adobedtm.com

```

## Home Depot Checkout

Clicking "Checkout" from the Shopping Cart on Home Depot's website takes you to a page to check out as guest, login, or create account. Entering login credentials does not ungray the "Sign In" option. "Checkout as a Guest" and "Create an Account" options do not load anything.

```auto
pihole allow nexus.ensighten.com

```

## Mozilla Firefox Tracking Protection

Firefox updates the black- and whitelists for Tracking Protection daily using a domain that might not only occur on some Blocklists, but also can be blocked as the result of regex blacklists for starting with "tracking". The domain should be whitelisted to ensure the Tracking Protection can be updated (when used at all), or it might render some websites useless on the Firefox Webbrowser in the long run.

```auto
pihole allow tracking-protection.cdn.mozilla.net

```

## Playstation 5 "Recently Played Games" and Trophies

```auto
pihole allow telemetry-console.api.playstation.com

```

## Cannon Printers

To be able to retrieve firmware updates

```auto
pihole allow gdlp01.c-wss.com

```

## MyFitnessPal Mobile App

These fixes login issue.

```auto
pihole allow sdk.split.io
pihole allow auth.split.io

```

## Reddit

```auto
pihole allow styles.redditmedia.com
pihole allow www.redditstatic.com
pihole allow reddit.map.fastly.net
pihole allow www.redditmedia.com
pihole allow reddit-uploaded-media.s3-accelerate.amazonaws.com
pihole --white-regex [a-z]\.thumbs\.redditmedia\.com
pihole --white-regex "(\.|^)redd\.it$"
pihole --white-regex "(\.|^)reddit\.com$"

```

## Tracking Packages sent with DPD

```auto
pihole allow tracking.dpd.de

```

## WhatsApp

```auto
pihole allow wa.me
pihole allow www.wa.me
pihole --white-regex "^whatsapp-cdn-shv-[0-9]{2}-[a-z]{3}[0-9]\.fbcdn\.net$"
pihole --white-regex "^((www|(w[0-9]\.)?web|media((-[a-z]{3}|\.[a-z]{4})[0-9]{1,2}-[0-9](\.|-)(cdn|fna))?)\.)?whatsapp\.(com|net)$"

```

## Signal

```auto
pihole allow ud-chat.signal.org
pihole allow chat.signal.org
pihole allow storage.signal.org
pihole allow signal.org
pihole allow www.signal.org
pihole allow updates2.signal.org
pihole allow textsecure-service-whispersystems.org
pihole allow giphy-proxy-production.whispersystems.org
pihole allow cdn.signal.org
pihole allow whispersystems-textsecure-attachments.s3-accelerate.amazonaws.com
pihole allow d83eunklitikj.cloudfront.net
pihole allow souqcdn.com
pihole allow cms.souqcdn.com
pihole allow api.directory.signal.org
pihole allow contentproxy.signal.org
pihole allow turn1.whispersystems.org

```

## Twitter

```auto
pihole allow twitter.com
pihole allow upload.twitter.com
pihole allow api.twitter.com
pihole allow mobile.twitter.com
pihole --white-regex "(\.|^)twimg\.com$"

```

## Banks

### TSB Mobile

```auto
pihole allow h-sdk.online-metrix.net

*Or Try:*

pihole allow check2.tsb.co.uk

```

### Citizen's Bank

```auto
pihole allow p11.techlab-cdn.com

```

### OLA MONEY

```auto
pihole allow logs.juspay.in

```

## Resturants / Rewards

### Burger King

```auto
pihole allow appboy-images.com rest.iad-03.braze.com

```

### Punchh (Farmer Boys, El Pollo Loco, Capriotti's, etc.)

```auto
pihole allow mobileandroidapi.punchh.com

```

## Rumble

The Rumble interface may have missing thumbnails and icons, and live streams present as a black screen. These are served from subdomains of `rmbl.ws` which should be added as a **wildcard whitelist** entry.

## Dutch / The Netherlands websites

### nu.nl (enable videos, tvgids et cetera)

```auto
pihole allow cds.s5x3j6q5.hwcdn.net

```

## Swedish streaming services

### svtplay (enable continuing where you left off)

```auto
pihole allow analytics.svt.se

```

### Hulu

### To stream movie or show

```auto
pihole allow ads-a-darwin.hulustream.com
pihole allow ads-fa-darwin.hulustream.com

```

---

<div class="post-metadata">

**Author:** ![DL6ER](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/dl6er/32/281_2.png) [@DL6ER](https://discourse.pi-hole.net/u/DL6ER)\
**Post date:** [May 11, 2018, 4:09pm UTC](https://discourse.pi-hole.net/t/commonly-whitelisted-domains/212/7 "2018-05-11T16:09:47Z")

</div>



---

<div class="post-metadata">

**Author:** ![hennix](https://discourse-cdn.pi-hole.net/letter_avatar_proxy/v4/letter/h/858c86/32.png) [@hennix](https://discourse.pi-hole.net/u/hennix)\
**Post date:** [July 20, 2018, 8:09pm UTC](https://discourse.pi-hole.net/t/commonly-whitelisted-domains/212/8 "2018-07-20T20:09:46Z")

</div>

**Windows10 Update**

Without the follwing Whitelist Entrys Windows10 update can't be completed.  
Default is blacklisting.

> pihole -w settings-win.data.microsoft.com  
> pihole -w v10.vortex-win.data.microsoft.com

---

<div class="post-metadata">

**Author:** ![bpr](https://discourse-cdn.pi-hole.net/letter_avatar_proxy/v4/letter/b/8797f3/32.png) [@bpr](https://discourse.pi-hole.net/u/bpr)\
**Post date:** [July 22, 2018, 5:53pm UTC](https://discourse.pi-hole.net/t/commonly-whitelisted-domains/212/9 "2018-07-22T17:53:30Z")

</div>

@hennix  
That's curious. Those are blacklisted in my pihole and I've gotten all windows updates

---

<div class="post-metadata">

**Author:** ![cody](https://discourse-cdn.pi-hole.net/letter_avatar_proxy/v4/letter/c/ecd19e/32.png) [@cody](https://discourse.pi-hole.net/u/cody)\
**Post date:** [July 28, 2018, 8:20am UTC](https://discourse.pi-hole.net/t/commonly-whitelisted-domains/212/10 "2018-07-28T08:20:40Z")

</div>

I can confirm this!

Not that updates won't be completed, you just won't get any, when you have those two addresses blocked!

---

<div class="post-metadata">

**Author:** ![semtex41](https://discourse-cdn.pi-hole.net/letter_avatar_proxy/v4/letter/s/7cd45c/32.png) [@semtex41](https://discourse.pi-hole.net/u/semtex41)\
**Post date:** [July 28, 2018, 8:42pm UTC](https://discourse.pi-hole.net/t/commonly-whitelisted-domains/212/11 "2018-07-28T20:42:37Z")

</div>

**Roku - ETWN App**  
Episode thumbnails were not loading when blocked.

> pihole -w f1.media.brightcove.com

---

<div class="post-metadata">

**Author:** ![JohnS524](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/johns524/32/1730_2.png) [@JohnS524](https://discourse.pi-hole.net/u/JohnS524)\
**Post date:** [August 23, 2018, 6:27pm UTC](https://discourse.pi-hole.net/t/commonly-whitelisted-domains/212/12 "2018-08-23T18:27:15Z")

</div>

> [@hennix](#):
>
> [v10.vortex-win.data.microsoft.com](http://v10.vortex-win.data.microsoft.com)

Microsoft added another one, found it today when my Xbox One X complained about "Local Cache not being able to be emptied"

v20.vortex-win.data.microsoft.com

---

<div class="post-metadata">

**Author:** ![twennywonn](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/twennywonn/32/4826_2.png) [@twennywonn](https://discourse.pi-hole.net/u/twennywonn)\
**Post date:** [August 27, 2018, 12:01am UTC](https://discourse.pi-hole.net/t/commonly-whitelisted-domains/212/13 "2018-08-27T00:01:21Z")

</div>

Images won't load in the cnn ios app without whitelisting

pihole -w dynaimage.cdn.turner.com

---

<div class="post-metadata">

**Author:** ![Cardin\_Nguyen](https://discourse-cdn.pi-hole.net/letter_avatar_proxy/v4/letter/c/858c86/32.png) [@Cardin\_Nguyen](https://discourse.pi-hole.net/u/Cardin_Nguyen)\
**Post date:** [August 27, 2018, 1:18am UTC](https://discourse.pi-hole.net/t/commonly-whitelisted-domains/212/14 "2018-08-27T01:18:48Z")

</div>

does anyone have CNN whitelist? videos doesnt play.

---

<div class="post-metadata">

**Author:** ![kdga](https://discourse-cdn.pi-hole.net/letter_avatar_proxy/v4/letter/k/82dd89/32.png) [@kdga](https://discourse.pi-hole.net/u/kdga)\
**Post date:** [August 27, 2018, 8:02pm UTC](https://discourse.pi-hole.net/t/commonly-whitelisted-domains/212/15 "2018-08-27T20:02:18Z")

</div>

I don’t have access to edit directly (probably as I am a new user), but I just noticed a potential error in the Microsoft section, in the text area for “There are several domains discovered initially on Reddit”:

xkms.xbolive.com - should most likely be updated to xkms.xboxlive.com.

---

<div class="post-metadata">

**Author:** ![RamSet](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/ramset/32/3497_2.png) [@RamSet](https://discourse.pi-hole.net/u/RamSet)\
**Post date:** [August 27, 2018, 8:07pm UTC](https://discourse.pi-hole.net/t/commonly-whitelisted-domains/212/16 "2018-08-27T20:07:45Z")

</div>

Thank you. I corrected the typo.

---

<div class="post-metadata">

**Author:** ![Username0504](https://discourse-cdn.pi-hole.net/letter_avatar_proxy/v4/letter/u/43a26b/32.png) [@Username0504](https://discourse.pi-hole.net/u/Username0504)\
**Post date:** [September 11, 2018, 9:18am UTC](https://discourse.pi-hole.net/t/commonly-whitelisted-domains/212/17 "2018-09-11T09:18:14Z")

</div>

Are you guys sure about Plex? I have nothing whitelisted and nothing is showing up blocked/pi-holed.

Edit:  
Just tried - appleid.apple.com no need to whitelist.  
target - needs api.target.com, redsky.target.com and profile.target.com to search their site  
BJs app - needs cdn.cpnscdn.com to show pictures of products in the app

h-sdk.online-metrix.net - my banking app needed this to permit functionality on iOS. seems to be tied with ThreatMetrix

---

<div class="post-metadata">

**Author:** ![PurpleHullPeas](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/purplehullpeas/32/2592_2.png) [@PurpleHullPeas](https://discourse.pi-hole.net/u/PurpleHullPeas)\
**Post date:** [September 11, 2018, 1:36pm UTC](https://discourse.pi-hole.net/t/commonly-whitelisted-domains/212/18 "2018-09-11T13:36:45Z")

</div>

It could be a few things. The blocklists are updated and change over time. It's possible that it used to be blocked, but is no longer blocked.

In addition to the default blocklists, many users choose to add additional lists. So another possibility is that Plex may be blocked in other popular lists.

---

<div class="post-metadata">

**Author:** ![danc](https://discourse-cdn.pi-hole.net/letter_avatar_proxy/v4/letter/d/77aa72/32.png) [@danc](https://discourse.pi-hole.net/u/danc)\
**Post date:** [September 27, 2018, 8:14am UTC](https://discourse.pi-hole.net/t/commonly-whitelisted-domains/212/19 "2018-09-27T08:14:24Z")

</div>

Is it possible to install this list of commonly whitelisted domains all in one go from the GUI? Failing that all in one go from the command line?

---

<div class="post-metadata">

**Author:** ![PurpleHullPeas](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/purplehullpeas/32/2592_2.png) [@PurpleHullPeas](https://discourse.pi-hole.net/u/PurpleHullPeas)\
**Post date:** [September 27, 2018, 12:48pm UTC](https://discourse.pi-hole.net/t/commonly-whitelisted-domains/212/20 "2018-09-27T12:48:16Z")

</div>

Try taking a look at this page for a batch command line option and more whitelisting suggestions:

> **[GitHub - anudeepND/whitelist: A simple tool to add commonly white listed domains...](https://github.com/anudeepND/whitelist)**
>
> A simple tool to add commonly white listed domains to your Pi-Hole setup.

Also, once you're inside the web interface, you can navigate to the the white list section and simply copy and paste all of sites in one go.

---

<div class="post-metadata">

**Author:** ![anon23790887](https://discourse-cdn.pi-hole.net/letter_avatar_proxy/v4/letter/a/bc8723/32.png) [@anon23790887](https://discourse.pi-hole.net/u/anon23790887)\
**Post date:** [November 11, 2018, 7:39pm UTC](https://discourse.pi-hole.net/t/commonly-whitelisted-domains/212/21 "2018-11-11T19:39:29Z")

</div>

We should add this to Whitelist too:

# wdcp.microsoft.com

(from [https://docs.microsoft.com/en-us/windows/privacy/manage-windows-endpoints](https://docs.microsoft.com/en-us/windows/privacy/manage-windows-endpoints)):

> This endpoint is used for Windows Defender when Cloud-based Protection is enabled. If you [turn off traffic for this endpoint](https://docs.microsoft.com/en-us/windows/privacy/manage-connections-from-windows-operating-system-components-to-microsoft-services#bkmk-defender), the device will not use Cloud-based Protection.

wdcpalt.microsoft.com  
(From [https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-antivirus/configure-network-connections-windows-defender-antivirus](https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-antivirus/configure-network-connections-windows-defender-antivirus)).

> Used by Windows Defender Antivirus to provide cloud-delivered protection

tsfe.trafficshaping.dsp.mp.microsoft.com  
(From [https://docs.microsoft.com/en-us/windows/privacy/windows-endpoints-1803-non-enterprise-editions](https://docs.microsoft.com/en-us/windows/privacy/windows-endpoints-1803-non-enterprise-editions) + [https://docs.microsoft.com/en-us/windows/privacy/manage-windows-endpoints](https://docs.microsoft.com/en-us/windows/privacy/manage-windows-endpoints)):

> This endpoint is used for content regulation. If you [turn off traffic for this endpoint](https://docs.microsoft.com/en-us/windows/privacy/manage-connections-from-windows-operating-system-components-to-microsoft-services#bkmk-wu), the Windows Update Agent will be unable to contact the endpoint and fallback behavior will be used. This may result in content being either incorrectly downloaded or not downloaded at all.

---

<div class="post-metadata">

**Author:** ![cohenjm98](https://discourse-cdn.pi-hole.net/letter_avatar_proxy/v4/letter/c/ba9def/32.png) [@cohenjm98](https://discourse.pi-hole.net/u/cohenjm98)\
**Post date:** [November 12, 2018, 3:01pm UTC](https://discourse.pi-hole.net/t/commonly-whitelisted-domains/212/22 "2018-11-12T15:01:42Z")

</div>

Anyone know of problems resetting/setting-up slingbox when pi-hole is active? Are there specific slingbox domains that need to be whitelisted?

---

<div class="post-metadata">

**Author:** ![twennywonn](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/twennywonn/32/4826_2.png) [@twennywonn](https://discourse.pi-hole.net/u/twennywonn)\
**Post date:** [January 14, 2019, 4:31am UTC](https://discourse.pi-hole.net/t/commonly-whitelisted-domains/212/23 "2019-01-14T04:31:23Z")

</div>

you have to whitelist .bea4.v.fwmrm.net for mobile CNN videos to load. I am trying to figure out what to whitelist to get CNET videos to load now.

---

<div class="post-metadata">

**Author:** ![semtex41](https://discourse-cdn.pi-hole.net/letter_avatar_proxy/v4/letter/s/7cd45c/32.png) [@semtex41](https://discourse.pi-hole.net/u/semtex41)\
**Post date:** [January 29, 2019, 1:51am UTC](https://discourse.pi-hole.net/t/commonly-whitelisted-domains/212/24 "2019-01-29T01:51:23Z")

</div>

How does one go about editing the wiki in this thread?  
I will make a second post with my contributions grouped, until I figure this out and can merge them with the primary post.

---

<div class="post-metadata">

**Author:** ![semtex41](https://discourse-cdn.pi-hole.net/letter_avatar_proxy/v4/letter/s/7cd45c/32.png) [@semtex41](https://discourse.pi-hole.net/u/semtex41)\
**Post date:** [January 29, 2019, 1:52am UTC](https://discourse.pi-hole.net/t/commonly-whitelisted-domains/212/25 "2019-01-29T01:52:26Z")

</div>

**Roku - ETWN App**  
Symptom: Episode thumbnails were not loading when blocked.

```
pihole -w f1.media.brightcove.com

```

**iOS - Ubiquiti WifiMan**  
Symptom: Red warning stating ip-api.com cannot be reached.

```
pihole -w pro.ip-api.com
pihole -w reports.crashlytics.com

```

[Next page](https://discourse.pi-hole.net/t/commonly-whitelisted-domains/212.md?page=2)