Which domains does iMazing connect to, and why?

Like most modern applications, iMazing connects to various domains during normal operation. iMazing does not upload any personal data to its servers. All data browsed or extracted from your Apple devices stays local—it's stored in iMazing's Cache folder on your computer and in the backups you create at your chosen storage location. While iMazing works well offline, some features will be unavailable, including app updates, iOS/iPadOS/visionOS app downloads, iCloud data access, iOS/iPadOS updates, device activation, and the spyware analyzer.

If you're deploying iMazing in a corporate environment, you'll need to whitelist at least api.imazing.com to activate the app. We recommend whitelisting all domains listed below to access iMazing's complete feature set.

To ensure iMazing works correctly, add these domain names to your computer or network firewall's whitelist for ports 80 and 443.

Installing or updating iMazing and Apple components:

• downloads.imazing.com
  • iMazing updates
• tlu.dl.delivery.mp.microsoft.com
  • Apple components’ updates for Windows, downloaded from the Microsoft Store

iMazing licensing system:

• imazing.com
  • iMazing embedded store and tech articles
• store.imazing.com
  • iMazing embedded store
• api.imazing.com
  • iiMazing's licensing and activation system

Features relying on Apple servers:

• *.apple.com
  • Activating new or erased devices
  • Installing or reinstalling iOS, iPadOS, and macOS on Apple Silicon (IPSW downloads)
  • Downloading iCloud data
  • Searching and downloading App Store apps
  • App Volume Purchasing (VPP) license management
• *.mzstatic.com
  • Apple's Content Delivery Network (CDN) that supports some of the features listed above

Spyware Analyzer:

The Spyware Analyzer needs to resolve HTTP redirects for URLs found in analyzed device data. To detect spyware, iMazing must be able to send HTTP requests to any domain or IP address.

• downloads.imazing.com
  • Downloading the up-to-date list of indicators of compromise (IoCs) used for analysis
• raw.githubusercontent.com
  • Downloading indicators of compromise (.stix files)

Issue reporting:

• sentry.io
• *.sentry.io

Network connectivity check:

If iMazing fails to contact its activation server on api.imazing.com, it will perform a sanity check and attempt to reach Google or Baidu. No information is exchanged with Google and Baidu servers–iMazing strictly performs a reachability check.

• google.com
• baidu.com

Customer Experience Program:

When users opt in to participate in the Customer Experience Program, iMazing sends anonymized analytics to Microsoft App Center, our platform for collecting anonymous usage statistics to help improve our product.

• *.appcenter.ms