I agree that "localhost" and "unknown" aren't right, but "apple.com" could be correct. Those reports show only the domain and don't show the exact url. You have to drill down and eventually supply an email to get the exact urls.
I agree in theory it could be correct. But there's a decent chance that if you submitted a batch of urls including invalid ones, your apple.com submission is bogus.
