Security Scan Report: stratum2.ru

Redirected to:
https://ntp-servers.net/
Submitted: Completed: publiccompleted
This website contacted 9 IPs in 2 countries across 8 domains to perform 39 HTTP transactions. The main domain is stratum2.ru.

Submitted URL: https://stratum2.ru

Effective URL:
https://ntp-servers.net/
Redirected

The Cisco Umbrella rank of the primary domain is #768,785 of the top 1 million websites

AI Security Verdict

Low Risk

Confidence: 72%

2
Risk Score

Public NTP time-sync utility page with no forms, no credential or payment collection, no brand impersonation, and no threat-intel matches. Clean, low-risk informational content.

Risk Factors (1)
Single eval() call present (weak signal; plausibly used for client-side clock/time-sync logic)
Safety Factors (5)
No credential, login, or payment forms anywhere on the page
No credential exfiltration and no cross-origin JS network targets
No brand impersonation or deceptive hostname
Clean threat-intel: no Indicators of Compromise, no hunting rule, no IDS alerts
Content is a genuine informational time-server utility with legal/contact links
Domain age information unavailable

Details

Page Title

NTP SERVERS — NTP серверы точного времени

Scan Type

public

Domain Name Analysis

Within the Russian country-code top-level domain (.ru), 'stratum2.ru' is registered and has no subdomain. The second-level label 'stratum2' is 8 characters long split between 2 vowels and 5 consonants, plus 1 digit. Segmentation suggests two words: stratum, 2. Expect four characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

NTP SERVERS CepBeptl TOUHOro BpeMeHH iavuaya, 18 ceraGpa 2026 roga 15:48:49 (UTC) Ao6po noxkanoBatb Bpena c NTP-cepaepa (UTC) Bpenaa Ha Komnstorepe (UTC) 15:48:49... 15:48:49... Ha Baulem KoMnbi...

Page Load Overview

2.52s
Total Load Time
638 KB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:80%
Script:Cyrillic
Direction:ltr

Detection Details

HTML Lang Attribute:ru
Text Length:4,472 chars
Detector Agreement:67%

Website Classification

Primary Category

unknown0% confidence
Type: dynamic
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
788.147.254.238Saratov, Saratov Oblast, Russia
AS12389Rostelecom
4104.21.42.160Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
477.88.44.55Yandex · CLOUDMoscow, Moscow, Russia
AS13238YANDEX LLC
477.88.21.119Yandex · CLOUDMoscow, Moscow, Russia
AS13238YANDEX LLC
437.9.64.225Yandex · CLOUDRussia
AS13238YANDEX LLC
487.250.251.119Yandex · CLOUDRussia
AS13238YANDEX LLC
45.255.255.77Yandex · CLOUDMoscow, Moscow, Russia
AS13238YANDEX LLC
477.88.55.88Yandex · CLOUDRussia
AS13238YANDEX LLC
487.250.250.119Yandex · CLOUDRussia
AS13238YANDEX LLC
399--

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T15401D0014D19DD0763601949FDA3384CC09FAA8E8A22EB54A9DA003FB2E89648D11959

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12:h8ZfDZu0fM1TEFggigse+0fM56M8fEg4cqJmrss5zojZFcOf6JV18VG:hUfDZOTD2k6tNGpS+VaEVG

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:762:AAAEAAAAAACBAEABAAABAAQAAAAAAAAAIAAAgAAABAAAgBAAAEAAAAAAAYAAAAAAAAAAAAAAAAAACAAAAAAAAgCAAAAAAgAI

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:dbc7c7c7c7dfffff
Perceptual Hash:b131cccc93ccc733
Difference Hash:161c1c1818163600
Wavelet Hash:0000c3c7c7c3d7ff
Color Hash:N/A

Other Hashes

Crop Resistant:161c1c1818163600

Scan History

Scan history not available

Unable to load historical scan data