Security Scan Report: nextdoor.sale-rrevalidation.com

Submitted: Completed: publiccompleted
This website contacted 7 IPs in 1 country across 5 domains to perform 24 HTTP transactions. The main domain is sale-rrevalidation.com and was registered 1 day ago.

Submitted URL: https://nextdoor.sale-rrevalidation.com/j/16154525

AI Security Verdict

High Risk

Confidence: 88%

8
Risk Score

Fake Nextdoor 'account suspended' page on a 1-day-old lookalike domain demanding payment-method verification within 24 hours. Brand impersonation and classic phishing urgency; do not enter any details.

Risk Factors (5)
Impersonation of a different entity's brand (Nextdoor) on a non-official domain
Brand impersonation combined with a 1-day-old, unranked domain
Payment-method 'verification' demand delivered under threat of account suspension — a card-data harvesting lure
24-hour ultimatum and indefinite-suspension threat create urgency
Deceptive hostname crafted to look like a Nextdoor revalidation service
Domain age information unavailable

Details

Page Title

Human Verification

Scan Type

public

Domain Name Analysis

You're looking at domain 'nextdoor.sale-rrevalidation.com' on the commercial generic top-level domain (.com), featuring subdomain 'nextdoor'. Its registrable label 'sale-rrevalidation' stretches across 18 characters containing 8 vowels alongside nine consonants, along with 1 hyphen. Splitting it apart reveals 4 words: sale, r, re, validation. Median word length comes out to 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://nextdoor.sale-rrevalidation.com/j/16154525

Page Load Overview

0.52s
Total Load Time
907 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:57%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:ru
Text Length:1,060 chars
Detector Agreement:100%
Language mismatch: Declared as ru but detected as en

Website Classification

Primary Category

documentation technical71% confidence
Type: static
Method: ml+structural+ocr_tiebreaker

All Detected Categories

documentation technical
71%
news media journalism
50%
government public service
47%
healthcare medical
38%
technology software
36%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
6188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3142.251.14.95Google · CDNUnited States
AS15169Google LLC
3104.17.207.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3142.251.20.94Google · CDNUnited States
AS15169Google LLC
3188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3104.17.208.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
247--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F63253972AFB04067947A1A47FB5671A2268D043A24FD8783BDC268C8FC65C5CD63B9C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:GKmxmSTeaOyi2R3feJe9aE3cWMrk7Al2/gjifTZH4BoL1j:Gh5sB2Ll

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:11868:CCIANkC4hJilFpYoAJwyFA4wlPAEIpEYMkggQQJARU5IENaAAgAk4bmAciK+XZhCUJBOBoytAhBEqEygiAs0CzpsYYAwYQk+

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffffe7e7ffe7ff
Perceptual Hash:e689996666999966
Difference Hash:0000304c4d300800
Wavelet Hash:f3f3ffc3c0c0c0c0
Color Hash:#5e2d86

Other Hashes

Crop Resistant:0000304c4d300800

Scan History

Scan history not available

Unable to load historical scan data