🌐 https://support.apple.com/guide/deployment/system-and-kernel-extensions-in-macos-depa5fb8376f/web
URL
· host
support.apple.com
· threat 0.50 (HIGH)
· ATT&CK First seen 2026-08-06 13:09:18 · last seen 2026-08-06 14:48:31
🔄 Pivot:📁 ATT&CK
Threat score
0.50
MEDIUM
Sightings
5
3 sources
Subdomains (local)
0
from indicators
Related IPs
2
A/AAAA records
DNS records (local)
0
0 types
Reporting sources
3
0 enrichments
📡 Reporting-source breakdown
1
1
1
3 total source links on this indicator.
🏷 Tag breakdown (domain family)
No data.
📈 DNS record-type counts
No data.
📅 First-seen timeline (family)
1
🏷 WHOIS / Registration (local cache)
No cached WHOIS for support.apple.com. Resolve & cache.
📡 DNS Records
Live (DNS-over-HTTPS · optional augmentation)
| Type | Value | TTL |
|---|---|---|
| A | prod-support.apple-support.akadns.net. |
175 |
| A | support-lb.apple-support.akadns.net. |
300 |
| A | support.apple.com.edgesuite.net. |
3600 |
| A | a527.g4.akamai.net. |
18679 |
| A | 23.220.73.156 |
20 |
| A | 23.220.73.153 |
20 |
| AAAA | prod-support.apple-support.akadns.net. |
243 |
| AAAA | support-lb.apple-support.akadns.net. |
300 |
| AAAA | support.apple.com.edgesuite.net. |
3600 |
| AAAA | a527.g4.akamai.net. |
3237 |
| MX | prod-support.apple-support.akadns.net. |
276 |
| MX | support-lb.apple-support.akadns.net. |
300 |
| MX | support.apple.com.edgesuite.net. |
3600 |
| MX | a527.g4.akamai.net. |
20465 |
| NS | prod-support.apple-support.akadns.net. |
246 |
| NS | support-lb.apple-support.akadns.net. |
300 |
| NS | support.apple.com.edgesuite.net. |
3600 |
| NS | a527.g4.akamai.net. |
18516 |
| TXT | prod-support.apple-support.akadns.net. |
246 |
| TXT | support-lb.apple-support.akadns.net. |
300 |
| TXT | support.apple.com.edgesuite.net. |
3600 |
| TXT | a527.g4.akamai.net. |
18516 |
| CNAME | prod-support.apple-support.akadns.net. |
246 |
🖥 Related IPs (2)
Resolved from local A/AAAA records (augmented with live DoH when reachable). Each pivots to its IP dossier.
🌐 Subdomains — local intel (0)
No subdomains of support.apple.com in local intel. Check crt.sh ↗
📡 Reporting Sources (3)
MITRE ATT&CK Enterprise | ATT&CK |
MITRE ATT&CK Groups (STIX) | ATT&CK Actors |
MITRE ATT&CK (STIX) | Framework |
🌐 Same-ASN domains (0)
No ASN linkage in local intel.
🔍 OSINT pivots — external lookups
🔗 Internal pivots & actions
Every panel resolves local-first: threat, category, first-seen & sightings from
indicators; DNS from dns_records; WHOIS from whois_cache; subdomains via bounded suffix match on indicators; related IPs from A/AAAA records; tags, reporting sources and the link graph from the local relations. Live OTX pulses and DNS-over-HTTPS are optional augmentation and their absence never blanks the dossier.
Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports
🤖 AI Copilot
⚡ AI Skills
🔍 Lookup & Enrich
📚 Docs & Reports
💡 Recommendations
- Audit DNS to build passive history
- Pivot resolved IPs to their dossiers
- Report phishing to registrar/host