Security Scan Report: recipe-med.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 8 IPs in 3 countries across 5 domains to perform 20 HTTP transactions. The main domain is recipe-med.com and was registered 4 months ago.

Submitted URL: https://recipe-med.com/

AI Security Verdict

High Risk

Confidence: 82%

8
Risk Score

Openly sells forged prescription blanks with fake doctor seals for controlled drugs and takes orders via Telegram. The page itself claims legality, but the service is an illegal document-forgery scheme; threat intelligence also flags the domain for phishing.

Risk Factors (6)
Sells forged medical prescription documents (blanks 107-1/у and 148-1/у-88) with forged doctor seals
Explicitly targets controlled substances (ПКУ) and prescription-only drugs without medical examination
Single-source threat-intelligence report of phishing on the primary domain
Very young domain (133 days) with no reputation ranking
Order and payment coordinated via Telegram, evading traceable commerce channels
Claims of 'guaranteed acceptance in any pharmacy' indicate document forgery for fraud
Domain age information unavailable

Details

Page Title

Купить рецепт на лекарство в Москве и РФ с доставкой — Бланки 107-1/у и 148-1/у | Рецепт-Мед

Scan Type

public

Domain Name Analysis

The domain 'recipe-med.com' uses the commercial generic top-level domain (.com) and has no subdomain. Count 10 characters in 'recipe-med' holding 4 vowels versus 5 consonants; bonus characters include one hyphen. Word splitting yields two words: recipe, med. Median word length comes out to 4.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Ог. Мас 42. Медицинский Сервис Услуги Препараты Бланки Прайс Рецепты с печатью врача 148-Шу и 107 и вся РОССИЯ Как купить © официальные бланки ГОСТ РФ + Оформление за 30 минут Купить рецепт на л...

Page Load Overview

1.06s
Total Load Time
1.8 MB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:80%
Script:Cyrillic
Direction:ltr

Detection Details

HTML Lang Attribute:ru
Text Length:14,431 chars
Detector Agreement:100%

Website Classification

Primary Category

healthcare medical94% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

healthcare medical
94%
social media network
86%
government public service
84%
documentation technical
77%
adult content
74%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
685.239.144.41Frankfurt am Main, Hesse, Germany
AS207043Dedik Services Limited
2104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.26.3.143Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
287.250.250.119Yandex · CLOUDRussia
AS13238YANDEX LLC
277.88.21.119Yandex · CLOUDMoscow, Moscow, Russia
AS13238YANDEX LLC
2104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2172.67.68.11Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
287.250.251.119Yandex · CLOUDRussia
AS13238YANDEX LLC
208--

Detected Technologies7

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1C6F3A63462FA14EB1103E0A7E9507F0E7D9992BFEE2BA212756C0A6D3FD38558D57308

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:QwDfyf6hhiMy4LAU1O/mEc+5nK4+lv5k1z6XmzE:TDfyf6hhe4LAUmX+lv5k1z6sE

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:166010:gfSQAJABAlZECXCABCUU5UG5OUDFCIRWD4BAAQGw+2AYQBUBYYzEWYgLwQ0kU4QCkCmaJC0AJgIrEQFhAwCMiBKgAElrgcYD

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00ff8b81dff3f89e
Perceptual Hash:ed29d6437c693116
Difference Hash:230233333613303c
Wavelet Hash:00ff8b8183f1fc9c
Color Hash:N/A

Scan History

Scan history not available

Unable to load historical scan data