Security Scan Report: sci-hub.ru

Site favicon
Submitted: Oct 4, 2026, 4:21:01 AMCompleted: Oct 4, 2026, 4:21:43 AMpubliccompleted

This website contacted 1 IP in 1 country across 1 domain to perform 37 HTTP transactions. The main domain is sci-hub.ru and was registered 13 years ago.

Submitted URL: https://sci-hub.ru

The Cisco Umbrella rank of the primary domain is #253,417 of the top 1 million websites

AI Security Verdict

Low Risk

Confidence: 72%

2
Risk Score

Established self-branded Sci-Hub domain with no credential/payment forms, no malware, no impersonation. Only signal is an unverified single-source report on a linked third-party domain. Low risk, but service hosts pirated academic content.

Risk Factors (2)
Domain hosts a service widely described as distributing pirated academic literature (copyright/legal exposure, not a malware or phishing indicator)
One single-source unverified phishing report against an outbound-linked third-party domain (solscan.io); unverified community submission, no corroboration
Safety Factors (5)
13-year-old well-established domain with a Cisco Umbrella ranking (#253,417)
Presents its own brand (Sci-Hub) with no brand impersonation of a different entity
No credential, login, password or payment forms — the single form is a DOI/URL search box
No JavaScript behavioral signals, no YARA malware, no credential exfiltration
Network IDS alerts are informational DDoS-Guard hosting heuristics only
Domain age information unavailable

Details

Page Title

Sci-Hub

Scan Type

public

Domain Name Analysis

You're looking at domain 'sci-hub.ru' on the Russian country-code top-level domain (.ru) while skipping any subdomain. Its registrable label 'sci-hub' stretches across 7 characters containing 2 vowels alongside 4 consonants; it also includes 1 hyphen. It segments into 2 words: sci, hub. Average segment length settles at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://sci-hub.ru

Page Load Overview

1.32s
Total Load Time
569 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:72%
Script:Latin
Direction:ltr

Detection Details

Text Length:76,529 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical26% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

documentation technical
26%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
37190.115.31.218United Arab Emirates
AS59692IQWeb FZ-LLC
371--

Detected Technologies1

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T13DE3E73263E1023201A341D06E96078BBBA5D547E217569076FC87ED1FCACA5EFB72C9

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:Naut+rVTxMU0b/xF+r0emZwElnTLfRMfZNfbQ8XBJxz+klX3hrhzGjfnnTVCqvF:dU0bRZwWnTmfZd08rxzofnnTn

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:154735:AKnQAiBlKoVV4g6ggBAMQiADMYRkYgjgF2bFBkEABQEmQAA5oAQhoCIJUBZoXCIimgMVCDAtOCQwsSREQhRKA9QdSMEBGKQC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff27241efffce5ff
Perceptual Hash:8707e9f8b81e50e5
Difference Hash:654f446c500d4d4d
Wavelet Hash:bd23221effeca0a0
Color Hash:#a0ac53

Scan History

Scan history not available

Unable to load historical scan data