Highscore 50 · flagged Tuesday, September 22, 2026

xkji.top

Appeared in the .top zone on Tuesday, September 22, 2026; by the end of that day the census found active website about saas & tech. Full domain report

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

What matched

TLD with a high abuse rate
matched: top
+8
page impersonates a brand
matched: Apple ID
+22
brand in page title, not in the name
matched: apple
+20
Registrar
NameSilo,LLC
Nameserver provider
Nameservers
monroe.ns.cloudflare.com, nash.ns.cloudflare.com
First-day state
active website
HTTP status
200
Page title
星科技助手官网|Apple ID 批量处理、礼品卡查余额与 Apple 设备码工具
Has a form
no
Brand echoed

Model opinions

Second opinionlooks like abuseconfidence 88%· claude-opus-5

Chinese-language site selling a point-metered Windows tool for bulk Apple ID operations — checking whether a password is correct, 'Apple ID 过检', resetting/querying security questions, removing or disabling two-factor authentication and checking gift-card balances — i.e. a credential-stuffing/account-takeover toolkit distributed via a lanzn.com file host, using Apple's logo for credibility rather than to phish the visitor.

First passlooks like phishingtarget: Appleconfidence 95%· claude-haiku-4-5

The page uses Apple's iconic logo and branding to impersonate Apple's official services, offering fraudulent capabilities like 'Apple ID batch processing,' password checking, security question reset, and two-factor authentication removal. The domain name (xkji.top) does not belong to Apple, yet the page presents itself as an official tool ('星科技助手官网') providing unauthorized access to Apple account functions—a classic phishing setup targeting Apple ID credential and account abuse.

A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.

What the page looked like on Tuesday, September 22, 2026

Screenshot of xkji.top taken by the zone census on 2026-09-22

Same data as JSON: /api/zone/domain/xkji.top. This page is not indexed by search engines and does not link to the site it describes.