App Review device never reaches our domain (NSURLErrorDomain -1001, no requests in server or Cloudflare logs)

Hello,

Our iOS app has been rejected four times under Guideline 2.1(a) because sign-in fails on the review iPad. The latest rejection showed NSURLErrorDomain error -1001 (the request timed out) on an iPad Air 11-inch (M3) with iPadOS 27.0, on November 5, 2026, at about 11:54 UTC. The same happened on October 16, 2026.

Setup:

  • API: https://wp.pavilion.az, HTTPS on port 443, fixed DNS name
  • DNS and proxy on Cloudflare (IPv4 and IPv6), publicly trusted certificate
  • The app uses URLSession, with no custom certificate checks and no proxy settings

What we checked:

  • Neither our origin server nor Cloudflare logged any request from the review device on either day. Other clients were served normally during the same minutes.
  • The domain resolves normally from many public DNS resolvers in the United States and Europe, over IPv4 and IPv6.
  • The app signs in in under one second on an iPad simulator in a data center in Los Angeles, and on our own devices through TestFlight.

This looks similar to https://developer.apple.com/forums/thread/773444, where a Cloudflare-hosted domain resolved to a wrong address inside Apple's network.

Could someone from Apple check how wp.pavilion.az resolves, and whether it is reachable, from the App Review network? We have resubmitted a build that adds a short network check to the error message (the DNS result and which connection step fails), but each review cycle takes many days.

Thank you.