Domain

apps.apple.com

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

DNS Check HTTP Check Run Full Scan .com TLD

Run a live full scan of apps.apple.com

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now

Hosting IPs

1,107

A/AAAA targets

Subdomains

—

CT + scan + body

Record Types

seen in DNS

Observed Certs

in our scans

DNS Records

—

AAAA

—

TXT

—

CNAME

—

CAA

—

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Subdomain enumeration pending

Every subdomain ever issued a TLS cert under this apex — extracted from Certificate Transparency logs, our own scan observations and body references.

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

163.61.207.143:443 81d382eebfd1…

Subject: itunes.apple.com

Issuer: Apple Public EV Server RSA CA 1 - G1

SANs: a1.mzstatic.com, a2.mzstatic.com, a3.mzstatic.com, a4.mzstatic.com, a5.mzstatic.com, accertify.mzstatic.com, amp-api-edge.apps.apple.com, amp-api-edge.music.apple.com, amp-api-search-edge.apps.apple.com, api-edge.apps.apple.com, api.apps.apple.com, api.books.apple.com, api.edu.apple.com, api.itunes.apple.com, api.music.apple.com, api.podcasts.apple.com, api.videos.apple.com, apps.apple.com, apps.mzstatic.com, assets-mercury.mzstatic.com, atve.tv.apple.com, b1.mzstatic.com, b2.mzstatic.com, b3.mzstatic.com, b4.mzstatic.com, b5.mzstatic.com, bookkeeper.itunes.apple.com, books.apple.com, configuration.apple.com, desktop-music-legacy.itunes.apple.com, edge.itunes.apple.com, images-mercury.mzstatic.com, init.itunes.apple.com, is1-ssl.mzstatic.com, is2-ssl.mzstatic.com, is3-ssl.mzstatic.com, is4-ssl.mzstatic.com, is5-ssl.mzstatic.com, itc.mzstatic.com, itunes.apple.com, metrics.mzstatic.com, music.apple.com, pd.itunes.apple.com, podcasts.apple.com, radio-activity.itunes.apple.com, radio-quickplay.itunes.apple.com, radio-services.itunes.apple.com, radio.itunes.apple.com, s.mzstatic.com, s1.mzstatic.com, s2.mzstatic.com, s3.mzstatic.com, s4.mzstatic.com, s5.mzstatic.com, sb.music.apple.com, sb.tv.apple.com, se-edge.itunes.apple.com, se.itunes.apple.com, search.itunes.apple.com, sf-api-token-service.itunes.apple.com, siri-search.itunes.apple.com, sp.itunes.apple.com, store.mzstatic.com, su.itunes.apple.com, sync.itunes.apple.com, tf-feedback.itunes.apple.com, tv.apple.com, upp.itunes.apple.com, uts-api-siri.itunes.apple.com, videos.apple.com, vocabulary.itunes.apple.com

154.217.245.208:443 81d382eebfd1…

Subject: itunes.apple.com

Issuer: Apple Public EV Server RSA CA 1 - G1

23.3.56.216:443 81d382eebfd1…

Subject: itunes.apple.com

Issuer: Apple Public EV Server RSA CA 1 - G1

188.130.141.102:8443 81d382eebfd1…

Subject: itunes.apple.com

Issuer: Apple Public EV Server RSA CA 1 - G1

152.67.158.157:8443 81d382eebfd1…

Subject: itunes.apple.com

Issuer: Apple Public EV Server RSA CA 1 - G1

192.243.125.62:443 81d382eebfd1…

Subject: itunes.apple.com

Issuer: Apple Public EV Server RSA CA 1 - G1

173.242.115.134:443 81d382eebfd1…

Subject: itunes.apple.com

Issuer: Apple Public EV Server RSA CA 1 - G1

14.137.230.222:443 81d382eebfd1…

Subject: itunes.apple.com

Issuer: Apple Public EV Server RSA CA 1 - G1

146.235.237.162:443 81d382eebfd1…

Subject: itunes.apple.com

Issuer: Apple Public EV Server RSA CA 1 - G1

23.54.137.144:443 a227cd7d3137…

Subject: music.apple.com

Issuer: Apple Public EV Server RSA CA 1 - G1

SANs: apps.apple.com, books.apple.com, music.apple.com, podcasts.apple.com, tv.apple.com, videos.apple.com

184.27.19.129:443 81d382eebfd1…

Subject: itunes.apple.com

Issuer: Apple Public EV Server RSA CA 1 - G1

64.83.12.184:443 81d382eebfd1…

Subject: itunes.apple.com

Issuer: Apple Public EV Server RSA CA 1 - G1

38.80.189.150:443 81d382eebfd1…

Subject: itunes.apple.com

Issuer: Apple Public EV Server RSA CA 1 - G1

64.83.17.39:443 81d382eebfd1…

Subject: itunes.apple.com

Issuer: Apple Public EV Server RSA CA 1 - G1

38.47.227.172:443 81d382eebfd1…

Subject: itunes.apple.com

Issuer: Apple Public EV Server RSA CA 1 - G1

216.36.80.108:443 81d382eebfd1…

Subject: itunes.apple.com

Issuer: Apple Public EV Server RSA CA 1 - G1

158.179.174.0:8443 81d382eebfd1…

Subject: itunes.apple.com

Issuer: Apple Public EV Server RSA CA 1 - G1

43.155.178.5:443 81d382eebfd1…

Subject: itunes.apple.com

Issuer: Apple Public EV Server RSA CA 1 - G1

144.34.198.158:443 81d382eebfd1…

Subject: itunes.apple.com

Issuer: Apple Public EV Server RSA CA 1 - G1

146.103.103.122:8443 81d382eebfd1…

Subject: itunes.apple.com

Issuer: Apple Public EV Server RSA CA 1 - G1

64.83.13.202:443 81d382eebfd1…

Subject: itunes.apple.com

Issuer: Apple Public EV Server RSA CA 1 - G1

64.83.12.208:443 81d382eebfd1…

Subject: itunes.apple.com

Issuer: Apple Public EV Server RSA CA 1 - G1

23.223.236.50:443 878c348940e9…

Subject: amp-api-updates.apps.apple.com

Issuer: Apple Public EV Server RSA CA 1 - G1

SANs: amp-api-updates.apps.apple.com

23.34.101.112:443 81d382eebfd1…

Subject: itunes.apple.com

Issuer: Apple Public EV Server RSA CA 1 - G1

64.81.113.113:443 81d382eebfd1…

Subject: itunes.apple.com

Issuer: Apple Public EV Server RSA CA 1 - G1

104.100.36.224:443 81d382eebfd1…

Subject: itunes.apple.com

Issuer: Apple Public EV Server RSA CA 1 - G1

154.17.233.82:8443 81d382eebfd1…

Subject: itunes.apple.com

Issuer: Apple Public EV Server RSA CA 1 - G1

23.195.100.27:443 81d382eebfd1…

Subject: itunes.apple.com

Issuer: Apple Public EV Server RSA CA 1 - G1

188.253.125.158:443 81d382eebfd1…

Subject: itunes.apple.com

Issuer: Apple Public EV Server RSA CA 1 - G1

154.217.245.233:443 81d382eebfd1…

Subject: itunes.apple.com

Issuer: Apple Public EV Server RSA CA 1 - G1

IPs Citing This Domain

Hosts whose HTML body references this domain. Strong signal for origin/mirror/embed discovery.

18.117.29.84:80 href · ×131

23.253.164.104:443 href · ×62

89.17.138.42:443 href · ×54

142.132.134.241:443 href · ×48

50.116.50.101:443 href · ×43

139.162.231.33:80 href · ×39

80.209.226.128:443 href · ×35

44.236.63.178:443 href · ×32

34.29.27.71:443 href · ×32

43.160.240.117:443 href · ×32

178.105.118.110:443 href · ×30

18.135.49.59:443 href · ×30

106.54.2.168:80 href · ×30

34.192.168.8:443 href · ×29

43.153.209.153:80 href · ×27

106.12.172.62:80 href · ×26

95.85.58.6:443 href · ×25

99.81.113.92:443 href · ×25

54.155.232.213:443 href · ×25

134.122.10.31:443 href · ×24

45.76.90.41:443 href · ×22

103.231.195.74:443 href · ×20

103.231.195.95:443 href · ×20

89.22.235.36:443 href · ×18

45.79.181.26:443 href · ×18

133.117.76.38:80 href · ×18

95.217.195.231:443 href · ×17

50.176.150.250:443 href · ×16

34.120.211.234:443 href · ×16

133.167.118.242:80 href · ×16

34.149.141.57:443 href · ×16

52.71.131.22:443 href · ×16

138.124.81.87:443 href · ×16

104.131.170.99:443 href · ×16

47.237.144.200:443 href · ×15

161.35.130.228:443 href · ×15

178.62.46.12:80 href · ×15

82.41.30.43:443 href · ×15

62.72.46.63:8080 href · ×14

158.179.174.171:80 href · ×14

18.190.132.215:443 href · ×14

15.204.50.112:443 href · ×14

8.148.231.147:443 href · ×13

38.180.206.25:80 href · ×13

34.102.136.132:443 href · ×13

147.92.191.20:443 href · ×12

212.16.185.196:80 href · ×12

52.78.167.55:443 href · ×12

128.140.103.144:443 href · ×12

13.113.183.59:443 href · ×12

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

No origin-IP leaks detected (yet)

Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.

CT-Log Evidence

Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.

9d2c4e97983c316c… google · xenon2026h2

Subject: apps.apple.com

Issuer: Apple Public EV Server RSA CA 4 - G1

SANs: bag.itunes.apple.com, downloaddispatch.itunes.apple.com, music.apple.com, podcasts.itunes.apple.com, su.itunes.apple.com, apps.apple.com, itunes.apple.com, podcasts.apple.com, speed-test.apple.com, upp.itunes.apple.com

Valid: 2026-02-26 14:51:19 → 2026-09-02 19:56:40

266b36edd269dce8… google · xenon2026h2

Subject: itunes.apple.com

Issuer: Apple Public EV Server RSA CA 4 - G1

SANs: play.link.apple.com, pd.itunes.apple.com, play.itunes.apple.com, sp.itunes.apple.com, api.podcasts.apple.com, ax.init.itunes.apple.com, books.apple.com, finance-app.itunes.apple.com, play.music.apple.com, music.apple.com, sync.itunes.apple.com, amp-api.edu.apple.com, amp-api.podcasts.apple.com, radio-activity.itunes.apple.com, init.itunes.apple.com, amp-api.videos.apple.com, play-edge.itunes.apple.com, radio-quickplay.itunes.apple.com, upp.itunes.apple.com, vpp-app.itunes.apple.com, itunes.apple.com, tf-feedback.itunes.apple.com, desktop-music-legacy.itunes.apple.com, amp-api-search-edge.apps.apple.com, api.ent.apple.com, api.apps.apple.com, su.itunes.apple.com, amp-api-edge.apps.apple.com, tv.apple.com, api.books.apple.com, pd-nk.itunes.apple.com, amp-api.apps.apple.com, se-edge.itunes.apple.com, amp-api.music.apple.com, api-edge.apps.apple.com, videos.apple.com, edge.itunes.apple.com, radio.itunes.apple.com, bag.itunes.apple.com, se.itunes.apple.com, se2.itunes.apple.com, api.edu.apple.com, bookkeeper.itunes.apple.com, api.itunes.apple.com, cma.itunes.apple.com, radio-services.itunes.apple.com, desktop-music.itunes.apple.com, apps.apple.com, search.itunes.apple.com, carrierbundle.itunes.apple.com, amp-api.books.apple.com, api.music.apple.com, amp-api.ent.apple.com, podcasts.apple.com, client-api.itunes.apple.com, sf-api-token-service.itunes.apple.com, api.videos.apple.com, pd-st.itunes.apple.com

Valid: 2026-02-24 17:39:58 → 2026-08-27 18:47:06

dd394b1df04f30d2… google · xenon2026h2

Subject: itunes.apple.com

Issuer: Apple Public EV Server RSA CA 4 - G1

SANs: carrierbundle.itunes.apple.com, amp-api.videos.apple.com, ax.init.itunes.apple.com, play-edge.itunes.apple.com, radio-activity.itunes.apple.com, podcasts.apple.com, tv.apple.com, amp-api.music.apple.com, api.videos.apple.com, api.apps.apple.com, amp-api-edge.apps.apple.com, se-edge.itunes.apple.com, pd-nk.itunes.apple.com, amp-api.books.apple.com, sync.itunes.apple.com, radio-quickplay.itunes.apple.com, bag.itunes.apple.com, edge.itunes.apple.com, sp.itunes.apple.com, se.itunes.apple.com, radio.itunes.apple.com, api.podcasts.apple.com, cma.itunes.apple.com, bookkeeper.itunes.apple.com, tf-feedback.itunes.apple.com, itunes.apple.com, amp-api-search-edge.apps.apple.com, desktop-music-legacy.itunes.apple.com, api.ent.apple.com, desktop-music.itunes.apple.com, videos.apple.com, amp-api.ent.apple.com, apps.apple.com, search.itunes.apple.com, client-api.itunes.apple.com, sf-api-token-service.itunes.apple.com, api.music.apple.com, pd-st.itunes.apple.com, api.books.apple.com, amp-api.apps.apple.com, se2.itunes.apple.com, amp-api.podcasts.apple.com, su.itunes.apple.com, api-edge.apps.apple.com, pd.itunes.apple.com, amp-api.edu.apple.com, music.apple.com, finance-app.itunes.apple.com, play.music.apple.com, init.itunes.apple.com, books.apple.com, api.edu.apple.com, vpp-app.itunes.apple.com, play.itunes.apple.com, radio-services.itunes.apple.com, api.itunes.apple.com, upp.itunes.apple.com

Valid: 2026-02-18 15:35:31 → 2026-08-26 17:30:36

20030ff7dfafdea1… google · xenon2026h2

Subject: itunes.apple.com

Issuer: Apple Public EV Server RSA CA 1 - G1

SANs: se-edge.itunes.apple.com, upp.itunes.apple.com, b4.mzstatic.com, a5.mzstatic.com, itunes.apple.com, sb.music.apple.com, search.itunes.apple.com, a2.mzstatic.com, b2.mzstatic.com, sp.itunes.apple.com, music.apple.com, api.books.apple.com, is1-ssl.mzstatic.com, is5-ssl.mzstatic.com, tv.apple.com, radio.itunes.apple.com, uts-api-siri.itunes.apple.com, is2-ssl.mzstatic.com, init.itunes.apple.com, is4-ssl.mzstatic.com, su.itunes.apple.com, videos.apple.com, atve.tv.apple.com, configuration.apple.com, itc.mzstatic.com, radio-activity.itunes.apple.com, accertify.mzstatic.com, s2.mzstatic.com, desktop-music-legacy.itunes.apple.com, s3.mzstatic.com, siri-search.itunes.apple.com, vocabulary.itunes.apple.com, a4.mzstatic.com, store.mzstatic.com, edge.itunes.apple.com, pd.itunes.apple.com, sb.tv.apple.com, s5.mzstatic.com, api-edge.apps.apple.com, api.videos.apple.com, api.itunes.apple.com, tf-feedback.itunes.apple.com, se.itunes.apple.com, api.apps.apple.com, bookkeeper.itunes.apple.com, sync.itunes.apple.com, s1.mzstatic.com, api.edu.apple.com, apps.mzstatic.com, b3.mzstatic.com, images-mercury.mzstatic.com, s4.mzstatic.com, apps.apple.com, sf-api-token-service.itunes.apple.com, amp-api-edge.apps.apple.com, metrics.mzstatic.com, b5.mzstatic.com, a3.mzstatic.com, radio-quickplay.itunes.apple.com, amp-api-search-edge.apps.apple.com, books.apple.com, s.mzstatic.com, api.podcasts.apple.com, assets-mercury.mzstatic.com, a1.mzstatic.com, desktop-store.itunes.apple.com, b1.mzstatic.com, is3-ssl.mzstatic.com, podcasts.apple.com, amp-api-edge.music.apple.com, api.music.apple.com, radio-services.itunes.apple.com

Valid: 2026-02-10 17:37:13 → 2026-08-19 17:56:01

31eeeb3becb5ccb2… google · xenon2026h2

Subject: itunes.apple.com

Issuer: Apple Public EV Server RSA CA 1 - G1

Valid: 2026-02-10 17:37:13 → 2026-08-19 17:56:01

7b8ae53e351b0a16… google · xenon2026h2

Subject: music.apple.com

Issuer: Apple Public EV Server RSA CA 1 - G1

SANs: podcasts.apple.com, videos.apple.com, music.apple.com, tv.apple.com, books.apple.com, apps.apple.com

Valid: 2026-02-05 19:32:01 → 2026-08-11 18:02:39

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Domain timeline pending

Passive-DNS history accumulates as our forward-DNS crawler observes A/AAAA/MX/NS/TXT records over time.