Highscore 42 · flagged Sunday, October 25, 2026

app-xunguo.world

Appeared in the .world zone on Sunday, October 25, 2026; by the end of that day the census found active website. Full domain report

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

What matched

page impersonates a brand
matched: Apple ID
+22
brand in page title, not in the name
matched: apple
+20
Registrar
NameMart Pte. Ltd.
Nameserver provider
Nameservers
ns1.domainnamedns.com, ns2.domainnamedns.com
First-day state
active website
HTTP status
200
Page title
迅果软件下载与使用帮助:Apple ID、点卡及代理
Has a form
no
Brand echoed
—

Model opinions

Second opinionlooks like abuseconfidence 60%· claude-opus-5-5

This is not an Apple phish. There is no form, and the page explicitly disclaims any Apple affiliation. It is a satellite promo page for the third-party 'Xunguo' tool at xunguo.cc, which advertises bulk Apple ID account modification, gift-card record checking, point cards, and concurrency/proxy configuration, a profile typical of account-farming or gift-card-checking fraud tooling.

First passlooks like abuseconfidence 85%· claude-haiku-4-5

XUNGUO is a third-party tool for bulk Apple account operations (as the site explicitly states: '迅果是第三方工具的品牌名称,本页不声称其为Apple官方产品'). The page disclaims Apple affiliation and does not impersonate Apple itself; it markets XUNGUO's own service. However, the domain name 'app-xunguo.world' combined with references to Apple ID bulk processing, account handling, and gift card operations suggests this is a tool for unauthorized mass account manipulation—a form of abuse (likely credential harvesting, accoun

A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.

What the page looked like on Sunday, October 25, 2026

Screenshot of app-xunguo.world taken by the zone census on 2026-10-25

Same data as JSON: /api/zone/domain/app-xunguo.world. This page is not indexed by search engines and does not link to the site it describes.