rakuten-two.vercel.app
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of rakuten-two.vercel.app
This domain appears to host a webpage presenting itself as Rakuten, a well-known cashback and shopping-rewards platform. The page title is "Rakuten.com," and the screenshot shows branding, cashback marketing language, and logos of major retailers such as Nike, Walmart, Samsung, and Kohl's, suggesting it is attempting to imitate a shopping rewards or affiliate-offer service.
The site is served from a subdomain on vercel.app rather than an official standalone Rakuten domain. Based on the domain structure and page presentation, it does not appear to be an official corporate web property of Rakuten. Instead, it may be a look-alike page designed to resemble a legitimate consumer shopping or rewards service.
Because the content centers on cashback offers, store logos, and a "Join Now" call to action, the website would most appropriately be viewed as a shopping/rewards-themed page. However, the mismatch between the displayed brand identity and the actual hosted domain is a significant contextual concern.
Safety Assessment for rakuten-two.vercel.app
Multiple security signals indicate elevated risk at the time of this scan. The domain was flagged by 20 out of 91 security engines, with many classifying it as phishing or malicious. In addition, one threat database listing was present, and the domain's IP address was listed on one mail-reputation blocklist. While the malware scan did not report confirmed malicious files, it did include a generic malicious-object heuristic tied to the domain and several local asset URLs, which adds further caution even though such heuristics are lower-confidence on their own.
The page also closely resembles the branding of Rakuten while being hosted on a vercel.app subdomain rather than an apparent official Rakuten-owned domain. That kind of brand resemblance may indicate a look-alike page intended to collect sign-ups, credentials, or other user information by borrowing trust from a recognized company. The very low published trust score and lack of meaningful traffic ranking further strengthen the risk profile.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site uses a valid SSL/TLS certificate issued by a mainstream certificate authority, with expiry shown as 2026-09-26. A valid certificate helps encrypt traffic in transit, but it does not by itself verify that the site is legitimate. The domain is hosted on Vercel infrastructure and resolves to IP address 216.198.79.3, with nameservers under vercel-dns-3.com.
WHOIS data indicates the domain record dates back to 2020 and expires in 2036, although this is a hosted subdomain rather than a standalone brand-owned domain. DNSSEC appears to be unsigned. From a security perspective, the main concern is not TLS configuration but the combination of phishing detections, brand-mimicking page content, and hosting on a generic app platform subdomain.
Share your experience with this website. Was it safe? Did you encounter any issues?