Security Scan Report: thelib.ru

Site favicon
Submitted: Sep 24, 2026, 2:29:26 PMCompleted: Sep 24, 2026, 2:31:22 PMpubliccompleted

This website contacted 65 IPs in 4 countries across 47 domains to perform 132 HTTP transactions. The main domain is thelib.ru and was registered 25 years ago.

Submitted URL: https://thelib.ru

The Cisco Umbrella rank of the primary domain is #315,695 of the top 1 million websites

AI Security Verdict

High Risk

Confidence: 72%

7
Risk Score

This site is named as malicious in threat-intelligence feeds — rated high risk on that basis.

Risk Factors (2)
Single-source, unverified threat-intel report labeling the primary domain 'bad service (malicious)' (static) — weak, uncorroborated
Excessive redirect chain: 45 redirects (36 cross-domain), possibly ad-network related
Domain age information unavailable

Details

Page Title

Электронная библиотека TheLib.Ru - бесплатно скачать книги. Скачать 100 000 бесплатных книг в электронном виде в электронной библиотеке.

Scan Type

public

Domain Name Analysis

The domain name 'thelib.ru' uses the Russian country-code top-level domain (.ru). The registrable portion 'thelib' spans 6 characters with two vowels and four consonants. It segments into 2 words: the, lib. Average segment length settles at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://thelib.ru

Page Load Overview

75.07s
Total Load Time
1.1 MB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:60%
Script:Cyrillic
Direction:ltr

Detection Details

Text Length:3,181 chars
Detector Agreement:100%

Website Classification

Primary Category

government public service79% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

government public service
79%
download file sharing
74%
education learning
73%
news media journalism
28%
forum
25%

Detected Features

Search
Comments

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
445.9.73.94Moscow, Moscow, Russia
AS205090First Server Limited
277.88.55.88Yandex · CLOUDRussia
AS13238YANDEX LLC
295.181.182.182Perm, Perm Krai, Russia
AS210756EdgeCenter LLC
288.212.202.52Moscow, Moscow, Russia
AS39134Edinaya Set Limited Liability Company
237.9.64.225Yandex · CLOUDRussia
AS13238YANDEX LLC
2185.31.113.248Germany
AS57363CDNvideo LLC
2193.3.184.27Russia
AS50214QWARTA LLC
2193.3.184.43Russia
AS50214QWARTA LLC
2151.236.127.161Germany
AS57363CDNvideo LLC
237.0.127.86Moscow, Moscow, Russia
AS61400Start2 LLC
13265--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T13D41D1A71C976E0E6241DA19A4D9FA09CD2CC0BFFF0C29596C90047E69C7742D6A731F

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

48:lmIDTLoOCpqTLoON0oKuTLoO6QSUQmUQRyn:1PPB0ov8UXU7

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:1986:BAAKAEAgkAAABAAAAAAAAADBIAAABAQAAgAACAQCAAAAAAIIAQQAQAEAJgAQAAAAAEAUAAIQAgwAVACCACBBAAgAgAAAAQAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:4e000e0cfe7f7f7f
Perceptual Hash:913be4e4c23b1fc4
Difference Hash:9ae83818e0fec6f6
Wavelet Hash:0e000c0c7e3f7f7e
Color Hash:#bf9540

Scan History

Scan history not available

Unable to load historical scan data