Phishing sites impersonating Rakuten

PhishDestroy has recorded 23 phishing domains impersonating Rakuten since 2025-10-21, 1 of them in the last 30 days. The most used registrars are Gname.com and GoDaddy.com; the most common TLDs are .cyou and .com. Open Rakuten only from its official app or a saved bookmark.

23
Domains, all time
1
Last 30 days
4
Online at last check
0
Confirmed takedowns

New domains in the last 90 days

2026-07-25: 02026-07-26: 02026-07-27: 02026-07-28: 02026-07-29: 02026-07-30: 02026-07-31: 02026-08-01: 02026-08-02: 02026-08-03: 02026-08-04: 02026-08-05: 02026-08-06: 02026-08-07: 02026-08-08: 02026-08-09: 02026-08-10: 02026-08-11: 02026-08-12: 02026-08-13: 02026-08-14: 02026-08-15: 02026-08-16: 02026-08-17: 12026-08-18: 02026-08-19: 02026-08-20: 02026-08-21: 02026-08-22: 02026-08-23: 02026-08-24: 02026-08-25: 02026-08-26: 02026-08-27: 02026-08-28: 02026-08-29: 02026-08-30: 02026-08-31: 02026-09-01: 02026-09-02: 02026-09-03: 02026-09-04: 02026-09-05: 02026-09-06: 02026-09-07: 02026-09-08: 02026-09-09: 02026-09-10: 02026-09-11: 02026-09-12: 02026-09-13: 02026-09-14: 02026-09-15: 02026-09-16: 02026-09-17: 02026-09-18: 02026-09-19: 02026-09-20: 02026-09-21: 02026-09-22: 02026-09-23: 02026-09-24: 02026-09-25: 02026-09-26: 02026-09-27: 02026-09-28: 02026-09-29: 02026-09-30: 02026-10-01: 02026-10-02: 02026-10-03: 02026-10-04: 02026-10-05: 12026-10-06: 02026-10-07: 02026-10-08: 02026-10-09: 02026-10-10: 02026-10-11: 02026-10-12: 02026-10-13: 02026-10-14: 02026-10-15: 02026-10-16: 02026-10-17: 02026-10-18: 02026-10-19: 02026-10-20: 02026-10-21: 02026-10-22: 0
Rakuten phishing domains detected per day: 2 from 2026-07-25 to 2026-10-22; peak 1.

How to tell a fake Rakuten site

Words most often added to the brand in reported domains: rkt, rkfb, yyt, xiaotianxiang, whatsoen, vsfo, jbq, whatsqrh, oolll, whatsujs.

  • Type the address yourself or use a bookmark; phishing links for Rakuten arrive through ads, search results, direct messages and fake support accounts.
  • Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters.
  • Rakuten does not ask you to confirm your password or card details through a link in an email or SMS.

Paste a suspicious address into the Homoglyph Checker or check it against the DestroyList.

Latest Rakuten phishing domains

The 23 most recently detected domains impersonating Rakuten
DomainFirst detectedStatus at last checkRegistrar
rakunten-shop.com2026-10-05OfflineGoDaddy.com
smackapp.com2026-08-17OnlineGoDaddy.com
pxjsjm.com2026-07-05OfflineGransy, s.r.o
rakuten-bank-info.netlify.app2026-06-15OfflineNetlify
rakuten.ueno-edp.jp2026-06-10OnlineAbuseradar
dhj.szytnfbl.top2026-05-21OfflineGname.com
klj.gangaoadmin.cyou2026-05-11OfflineGname.com
rtadasdhu.zwwznx.info2026-03-29OnlineChengdu West Dimension Digital Technolog
digitalrakuten.com2026-03-28OfflineOnamae.com
2025rkt.vip2026-02-26Offline—
whatscart.cyou2026-02-26OfflineGname.com
rakutbs25.top2026-02-26Offline—
whatscnus.cyou2026-02-26OfflineGname.com
2025rkt-sa.vip2025-12-27OfflineGname.com
ccfff.cyou2025-11-08OfflineGname.com
wwjjj.cyou2025-11-07OfflineGname.com
whatsujs.cyou2025-11-07OfflineGname.com
oolll.cyou2025-11-07OfflineGname.com
whatsqrh.cyou2025-11-06OfflineGname.com
1vsfo5jbq6.cyou2025-11-05OfflineGname.com
whatsoen.cyou2025-11-04OfflineGname.com
yyt.xiaotianxiang.com2025-10-21OnlineGname.com
rkfb-2005.vip2025-10-21OfflineGname.com

All 23 Rakuten reports

Where they are registered and hosted

Registrars

  1. Gname.com14
  2. GoDaddy.com2
  3. Onamae.com1
  4. Chengdu West Dimension Digital Technolog1
  5. Abuseradar1
  6. Gransy, s.r.o1
  7. Netlify1

Top-level domains

  1. .cyou10
  2. .com5
  3. .vip3
  4. .top2
  5. .info1
  6. .jp1
  7. .app1

Hosting networks

  1. CLOUDFLARENET, US9
  2. TENCENT-NET-AP-CN Tencent Building, Kejizhongyi 5
  3. Cloudflare, Inc.3
  4. GMO-Z com NetDesign Holdings Co., Ltd.1
  5. GMO Internet, Inc.1
  6. CLOUDFLARENET - Cloudflare, Inc., US1
  7. Amazon.com, Inc.1
  8. GoDaddy.com, LLC1

Related

Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is Rakuten; share of all PhishDestroy reports: 0.01%.