diff --git a/hostlists/sneak-macos26-hosts.txt b/hostlists/sneak-macos26-hosts.txt
new file mode 100644
index 0000000..515edfc
--- /dev/null
+++ b/hostlists/sneak-macos26-hosts.txt
@@ -0,0 +1,11 @@
+# all observed coming from a macOS 26 Tahoe host
+radarsubmissions.apple.com
+valid.apple.com
+dejavu.apple.com
+bag.itunes.apple.com
+swallow.apple.com
+kttcc-prod.ess.apple.com
+gateway-oblivious.apple.com
+acsegateway.icloud.com
+gateway.icloud.com
+itunes.apple.com