What are the Salesforce IP Addresses & Domains to whitelist?

Required Domains

Source: https://help.salesforce.com/articleView?id=000321501&type=1&mode=1

If your company has policies to whitelist only Salesforce domains, please include to the following domains to ensure you receive all content from Salesforce:
*.force.com
*.salesforce.com
*.salesforceliveagent.com (Necessary if you are using Live Agent, Omni or SOS)
*.visualforce.com
*.documentforce.com
*.lightning.com
*.salesforce-communities.com (Necessary if you are using Communities or Site.com)
*.forceusercontent.com
*.forcesslreports.com 
*.salesforce-hub.com (Necessary for Customer 360)
*.trailblazer.me