rakutbs25[.]top

This report analyzes the domain rakutbs25.top, which presents a fraudulent version of the Rakuten brand based on its page title. The site poses a threat as a phishing or scam page designed to impersonate the legitimate Rakuten e-commerce platform, likely attempting to steal user credentials or financial information through a deceptive login interface.

Technical analysis reveals the domain was flagged by 14 out of 95 VirusTotal vendors, including alphaMountain.ai, BitDefender, CRDF, CyRadar, and Forcepoint ThreatSeeker. It is listed on 2 blocklists. The domain was created on 2026-02-21 and resolves to IP address 172.67.223.10 located in the United States, hosted by AS13335 Cloudflare, Inc. The SSL certificate is type WE1. The site has a GridinSoft trust score of 0 out of 100.

Currently, the domain is offline or down, which limits immediate threat activity. However, the DOM risk score is 83, indicating a high potential for harm if the site becomes active again. The combination of a recent creation date, low trust score, and multiple security vendor detections confirms this domain is a high-risk impersonation of Rakuten.