# Phishing sites impersonating Rakuten PhishDestroy has recorded 23 phishing domains impersonating Rakuten since 2025-10-21, 1 of them in the last 30 days. The most used registrars are Gname.com and GoDaddy.com; the most common TLDs are .cyou and .com. Open Rakuten only from its official app or a saved bookmark. 23Domains, all time 1Last 30 days 4Online at last check 0Confirmed takedowns ## New domains in the last 90 days Rakuten phishing domains detected per day: 2 from 2026-07-25 to 2026-10-22; peak 1. ## How to tell a fake Rakuten site Words most often added to the brand in reported domains: rkt, rkfb, yyt, xiaotianxiang, whatsoen, vsfo, jbq, whatsqrh, oolll, whatsujs. - Type the address yourself or use a bookmark; phishing links for Rakuten arrive through ads, search results, direct messages and fake support accounts. - Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters. - Rakuten does not ask you to confirm your password or card details through a link in an email or SMS. Paste a suspicious address into the [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker) or check it against the [DestroyList](https://phishdestroy.io/developer-tools/destroylist-check). ## Latest Rakuten phishing domains The 23 most recently detected domains impersonating Rakuten Domain | First detected | Status at last check | Registrar | [rakunten-shop.com](https://phishdestroy.io/domain/rakunten-shop.com/) | 2026-10-05 | Offline | GoDaddy.com | [smackapp.com](https://phishdestroy.io/domain/smackapp.com/) | 2026-08-17 | Online | GoDaddy.com | [pxjsjm.com](https://phishdestroy.io/domain/pxjsjm.com/) | 2026-07-05 | Offline | Gransy, s.r.o | [rakuten-bank-info.netlify.app](https://phishdestroy.io/domain/rakuten-bank-info.netlify.app/) | 2026-06-15 | Offline | Netlify | [rakuten.ueno-edp.jp](https://phishdestroy.io/domain/rakuten.ueno-edp.jp/) | 2026-06-10 | Online | Abuseradar | [dhj.szytnfbl.top](https://phishdestroy.io/domain/dhj.szytnfbl.top/) | 2026-05-21 | Offline | Gname.com | [klj.gangaoadmin.cyou](https://phishdestroy.io/domain/klj.gangaoadmin.cyou/) | 2026-05-11 | Offline | Gname.com | [rtadasdhu.zwwznx.info](https://phishdestroy.io/domain/rtadasdhu.zwwznx.info/) | 2026-03-29 | Online | Chengdu West Dimension Digital Technolog | [digitalrakuten.com](https://phishdestroy.io/domain/digitalrakuten.com/) | 2026-03-28 | Offline | Onamae.com | [2025rkt.vip](https://phishdestroy.io/domain/2025rkt.vip/) | 2026-02-26 | Offline | — | [whatscart.cyou](https://phishdestroy.io/domain/whatscart.cyou/) | 2026-02-26 | Offline | Gname.com | [rakutbs25.top](https://phishdestroy.io/domain/rakutbs25.top/) | 2026-02-26 | Offline | — | [whatscnus.cyou](https://phishdestroy.io/domain/whatscnus.cyou/) | 2026-02-26 | Offline | Gname.com | [2025rkt-sa.vip](https://phishdestroy.io/domain/2025rkt-sa.vip/) | 2025-12-27 | Offline | Gname.com | [ccfff.cyou](https://phishdestroy.io/domain/ccfff.cyou/) | 2025-11-08 | Offline | Gname.com | [wwjjj.cyou](https://phishdestroy.io/domain/wwjjj.cyou/) | 2025-11-07 | Offline | Gname.com | [whatsujs.cyou](https://phishdestroy.io/domain/whatsujs.cyou/) | 2025-11-07 | Offline | Gname.com | [oolll.cyou](https://phishdestroy.io/domain/oolll.cyou/) | 2025-11-07 | Offline | Gname.com | [whatsqrh.cyou](https://phishdestroy.io/domain/whatsqrh.cyou/) | 2025-11-06 | Offline | Gname.com | [1vsfo5jbq6.cyou](https://phishdestroy.io/domain/1vsfo5jbq6.cyou/) | 2025-11-05 | Offline | Gname.com | [whatsoen.cyou](https://phishdestroy.io/domain/whatsoen.cyou/) | 2025-11-04 | Offline | Gname.com | [yyt.xiaotianxiang.com](https://phishdestroy.io/domain/yyt.xiaotianxiang.com/) | 2025-10-21 | Online | Gname.com | [rkfb-2005.vip](https://phishdestroy.io/domain/rkfb-2005.vip/) | 2025-10-21 | Offline | Gname.com | [All 23 Rakuten reports](https://phishdestroy.io/domain/?brand=Rakuten) ## Where they are registered and hosted ### Registrars - [Gname.com](https://phishdestroy.io/registrar/name-com/)14 - [GoDaddy.com](https://phishdestroy.io/registrar/godaddy/)2 - Onamae.com1 - [Chengdu West Dimension Digital Technolog](https://phishdestroy.io/registrar/chengdu-west-dimension/)1 - [Abuseradar](https://phishdestroy.io/registrar/abuseradar/)1 - [Gransy, s.r.o](https://phishdestroy.io/registrar/gransy/)1 - Netlify1 ### Top-level domains - [.cyou](https://phishdestroy.io/tld/cyou/)10 - [.com](https://phishdestroy.io/tld/com/)5 - [.vip](https://phishdestroy.io/tld/vip/)3 - [.top](https://phishdestroy.io/tld/top/)2 - [.info](https://phishdestroy.io/tld/info/)1 - [.jp](https://phishdestroy.io/tld/jp/)1 - [.app](https://phishdestroy.io/tld/app/)1 ### Hosting networks - CLOUDFLARENET, US9 - TENCENT-NET-AP-CN Tencent Building, Kejizhongyi 5 - Cloudflare, Inc.3 - GMO-Z com NetDesign Holdings Co., Ltd.1 - GMO Internet, Inc.1 - CLOUDFLARENET - Cloudflare, Inc., US1 - Amazon.com, Inc.1 - GoDaddy.com, LLC1 ## Related - [Typosquatting](https://phishdestroy.io/glossary/typosquatting/) - [Homoglyph](https://phishdestroy.io/glossary/homoglyph/) - [Phishing kit](https://phishdestroy.io/glossary/phishing-kit/) - [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker) - [Abuse Report Generator](https://phishdestroy.io/developer-tools/abuse-report-generator) - [If you already used a fake site: emergency guide](https://phishdestroy.io/critical-action) - [All impersonated brands](https://phishdestroy.io/brand/) Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is Rakuten; share of all PhishDestroy reports: 0.01%. Canonical: https://phishdestroy.io/brand/rakuten/