ScanMalware.com

Security Scan Report: libgen.li

Site favicon
Submitted: Sep 5, 2026, 2:51:50 AMCompleted: Sep 5, 2026, 2:54:36 AMpubliccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/6753673c-835b-4f01-b412-fb8ab49cdeb3Domain and IP registration (RDAP)/api/v1/rdap/6753673c-835b-4f01-b412-fb8ab49cdeb3Certificate Transparency/api/v1/ct/libgen.liHow often this domain was scanned/api/v1/domain/stats/libgen.liScan history for this domain/api/v1/domain/history/libgen.li?limit=15

This website contacted 5 IPs in 2 countries across 3 domains to perform 14 HTTP transactions. The main domain is libgen.li and was registered 20 years ago.

Submitted URL: https://libgen.li

The Cisco Umbrella rank of the primary domain is #386,303 of the top 1 million websites

AI Security Verdict

Safe Website

Confidence: 92%

0
Risk Score

The site shows no malicious indicators, has no credential collection, and is hosted on a long‑standing domain; it is classified as legitimate.

Safety Factors (4)
Established domain with long registration history
Absence of malicious scripts or exfiltration behavior
No external malicious links or redirects
Positive business legitimacy indicator (physical address visible)
Domain age information unavailable

Details

Page Title

Library Genesis

Scan Type

public

Domain Name Analysis

Within the .li country-code top-level domain, 'libgen.li' is registered with no subdomain. The core label 'libgen' covers 6 characters containing 2 vowels alongside four consonants. It segments into 2 words: lib, gen. Expect three characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://libgen.li

Page Load Overview

20.01s
Total Load Time
133 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:50%
Script:Latin
Direction:ltr

Detection Details

Text Length:5,592 chars
Detector Agreement:100%

Website Classification

Primary Category

news media journalism56% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

news media journalism
56%
government public service
56%
download file sharing
53%
documentation technical
50%
technology software
50%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
6104.17.207.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2151.101.65.155Fastly · CDNUnited States
AS54113Fastly, Inc.
2179.43.167.164Rümlang, Zurich, Switzerland
AS51852Private Layer INC
2104.17.208.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2151.101.193.155Fastly · CDNUnited States
AS54113Fastly, Inc.
145--

Detected Technologies3

JQueryv3.6.0
100%
jsDelivr
20%
jQuery CDN
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1B751D80B89818B16AA4164C0F89A7F59ED3E840F5F474EBC7827AD7ACEC765C80707A4

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

48:Imsp+w8O8c6AA98jy84v8frJDJufTFSFTAGk4FidVek/:346AA98QBSFcGkpdVb

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:2600:IQAkAAgCCEAAwAAAAAoDAEABEIAEAAQAECAQjIQABUQAAAAAAAYEIIJADAAIBBACgIIIASgAAEIASAAQAACAAIAAAgIUAgKE

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00ff3bffffffff00
Perceptual Hash:ab2172f676ca0b0b
Difference Hash:8f0c731200000001
Wavelet Hash:000000ffffffff00
Color Hash:#53ac6f

Other Hashes

Crop Resistant:8f0e731300000000,0000d0a5a5819000,8001212101000000

Scan History

Scan history not available

Unable to load historical scan data