Which domains does iMazing connect to, and why?

Updated on Apr 22, 2026

Reading time ~3 minutes

If your organization uses a firewall or network access control system, iMazing may fail to activate or function correctly until the required domains are whitelisted. This guide lists every domain iMazing connects to, explains why, and specifies the ports to open.

iMazing runs fully locally on macOS and Windows, it never uploads your device data to its servers. Network connections are limited to software updates, licensing, Apple service integration, and optional telemetry.

    Minimum requirement for activation

    To activate iMazing, whitelist the following domain on ports 80 and 443:

    • api.imazing.com

    If only this domain is whitelisted, iMazing can be activated. Features that depend on Apple servers, app downloads, or telemetry will remain unavailable.

    To restore full functionality, whitelist all domains listed in the sections below.

    Installation and updates

    Open ports 80 and 443 for:

    • downloads.imazing.com
      • iMazing updates
    • tlu.dl.delivery.mp.microsoft.com
      • Apple components' updates for Windows, downloaded from the Microsoft Store

    Licensing

    Open ports 80 and 443 for:

    • imazing.com
      • iMazing embedded store and support articles
    • store.imazing.com
      • iMazing embedded store
    • api.imazing.com
      • iMazing licensing and activation system

    Apple services

    Open ports 80 and 443 for:

    • *.apple.com
      • Activating new or erased devices
      • Installing or reinstalling iOS, iPadOS, and macOS on Apple Silicon (IPSW downloads)
      • Downloading iCloud data
      • Searching and downloading App Store apps
      • App Volume Purchasing (VPP) license management
    • *.mzstatic.com
      • Apple's Content Delivery Network (CDN) that supports some of the features listed above

    Spyware Analyzer

    Important: The Spyware Analyzer must be able to send HTTP requests to any domain or IP address. It follows HTTP redirects for URLs found in analyzed device data to detect spyware. This requirement cannot be scoped to a fixed list of domains.

    Open ports 80 and 443 for:

    • downloads.imazing.com — downloading the up-to-date list of indicators of compromise (IoCs) used for analysis
    • raw.githubusercontent.com — downloading indicators of compromise (.stix files)

    In addition, allow unrestricted outbound HTTP/HTTPS access when running the Spyware Analyzer.

    Issue reporting

    Open ports 80 and 443 for:

    • sentry.io
    • *.sentry.io

    These domains are used by iMazing's automatic error reporting system. Blocking them does not affect core functionality.

    Network connectivity check

    If iMazing fails to contact its activation server on api.imazing.com, it will perform a sanity check and attempt to reach Google or Baidu. No information is exchanged with Google and Baidu servers–iMazing strictly performs a reachability check.

    • google.com
    • baidu.com

    Customer Experience Program

    When users opt in to participate in the Customer Experience Program, iMazing sends anonymized usage data to Google Analytics, our platform for collecting anonymous usage statistics to help improve our product. We record in-app navigation events, without any user data.

    Blocking this domain does not affect core functionality. Users who have not opted in generate no traffic to this domain.

    Guides

    Support Center - Guides