Here is what I get:
> swcdn.apple.com
Server: google-public-dns-a.google.com
Address: 8.8.8.8
Non-authoritative answer:
Name: swcdn.g.aaplimg.com
Address: 17.253.15.202
Aliases: swcdn.apple.com
swcdn.apple.com.akadns.net
I am using the Google public DNS servers, so that should be a clean lookup.
I’m sorry; I don’t understand your response. Is the address legit or not?
Good catch on the actual IP address. Could be a nasty redirect. The address looks like a valid Apple software CDN.