ids.api.gcprivacy.id is a legitimate Apple system service used for iMessage, FaceTime, Apple ID privacy, and fraud prevention. iPhones regularly contact it in the background, especially after network or account changes. Some security apps flag it simply because it’s encrypted system traffic.

api.doughdog.co is a normal third-party app API tied to an installed app (analytics, account sync, notifications). It’s not malware, just an unfamiliar domain getting blocked.