Security Scan Report: bilibiliapp.download

Site favicon
Submitted: Completed: publiccompleted
This website contacted 5 IPs in 1 country across 3 domains to perform 43 HTTP transactions. The main domain is bilibiliapp.download and was registered 2 months ago.

Submitted URL: https://bilibiliapp.download

AI Security Verdict

Moderate Risk

Confidence: 65%

5
Risk Score

Unofficial 69-day-old site claims to be the 'Official' BiliBili APK source. No credential/payment forms or malware hits found, but brand impersonation plus third-party APK distribution warrants caution.

Risk Factors (3)
Unofficial domain claiming to be the 'Official' BiliBili app source (brand impersonation)
APK distribution for a third-party brand from a 69-day-old, unranked domain
SEO-style download page mimicking a well-known streaming service
Safety Factors (4)
No Indicators of Compromise matched against the page or its resources
No hunting rule/native-scanner JS malware patterns and no known malicious kit in roster
No credential, password or payment collection fields on the page
Cross-origin traffic limited to Google Analytics/GTM
Domain age information unavailable

Details

Page Title

Bilibili App Download APK for Android (bilibili アプリOfficial) 2026 - BiliBili

Scan Type

public

Domain Name Analysis

You're looking at domain 'bilibiliapp.download' on the .download top-level domain. Its registrable label 'bilibiliapp' stretches across 11 characters split between 5 vowels and 6 consonants. Segmentation suggests 4 words: bil, ibi, li, app. Median word length is 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Download Navigation different types of videos, shows, and online content. The app is known for anime, movies, gaming videos, music, and many other categories li App Download 4.9 Rating (2M+ Reviews...

Page Load Overview

0.47s
Total Load Time
746 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:15,411 chars
Detector Agreement:88%

All Detected Languages

🇺🇸en(98%)🇷🇴ro(1%)🇪🇸ca(0%)🇫🇷fr(0%)

Website Classification

Primary Category

entertainment media99% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

entertainment media
99%
technology software
72%
corporate
35%
documentation technical
31%
phishing/scam
20%

Detected Features

Search
Articles
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
40172.67.196.203Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
8142.251.14.97Google · CDNUnited States
AS15169Google LLC
8104.21.21.63Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
8142.251.13.97Google · CDNUnited States
AS15169Google LLC
2216.239.32.36Google · CDNUnited States
AS15169Google LLC
435--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T172141AB2E13415752E2BCBA891C93B1D74186645E60731EEB1F9C0E46BD9BE208F374B

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:Fv5J0t3x/ZTVb9bBjp3N/V/5HBDFrNrpzRvd3lXhfeIr+GYiBs1:J5J0t3x/ZTVb9bBjp3N/V/5HBDFrNrpQ

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:200972:MFwEVmMKMWQIJfMkAhlCqxMSEgBR5BSHQGgglgqEgwASJXg0AJJEAxTUR+ADEToVPxDEBIBFgGD6EPRHEGvoAAxmSUQAxl4P

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00f3d3d3d3f3ffc3
Perceptual Hash:ec6d134738133b53
Difference Hash:9716161616162937
Wavelet Hash:00c3c3c3c3d3ff83
Color Hash:06000040007

Scan History

Scan history not available

Unable to load historical scan data