In any case, some researchers have claimed that Sci-Hub obtained their credentials through phishing. I don't know if it's true but in any case, such claims provide plausible deniability against that kind of watermarking proof, don't they ?