reyona[.]co[.]jp

The domain reyona.co.jp is currently classified as a high‑risk generic phishing site and remains active as of July 23, 2026. Infrastructure analysis shows the domain resolves to IP address 112.78.112.230, which belongs to the AS9371 network operated by SAKURA Internet Inc. in Japan. The web server reports an HTTP 200 response and is identified as Nginx, serving content secured with a Let’s Encrypt certificate (R12). The page title returned by the server is "株式会社REYONA," indicating a Japanese corporate name, but no additional brand or service information is available from the observed page metadata.

Reputation data indicates the domain appears on a single security blocklist and has been explicitly blocked by the PhishDestroy feed. A Gridinsoft trust score of 0 out of 100 further underscores the lack of confidence in the site’s legitimacy. VirusTotal analysis shows that 15 of 95 scanning engines have flagged the domain, suggesting a notable level of detection across independent vendors. Defenders should treat any traffic to reyona.co.jp as malicious.

Recommended actions include adding the domain to deny‑list controls at perimeter firewalls and DNS filtering services, monitoring for outbound connections to the associated IP address, and alerting users about the phishing risk. Since the page title alone does not reveal the specific lure employed, additional inspection of the site’s payload may be required if the domain is encountered in a controlled environment. Continuous re‑evaluation is advised, as threat actor infrastructure can evolve, but current indicators collectively confirm a high‑confidence phishing classification.