# ra-rick.info — SUSPICIOUS

> ra-rick.info is a suspicious domain impersonating a legal service site. Avoid sharing personal info and verify official sources before engaging.

## Summary
PhishDestroy identifies ra-rick.info as a medium-risk generic phishing domain impersonating the website of Rechtsanwalt Christoph Rick, a legal professional specializing in insolvency and restructuring law. This phishing attempt is concerning because it targets users seeking legal assistance, potentially leading to theft of sensitive personal or financial information.

The domain ra-rick.info was registered recently on March 13, 2026, through NiceNIC International Group Co., Limited and resolves to the IP address 104.21.26.78. Currently, the site remains active and is flagged by 3 out of 95 security vendors on VirusTotal, as well as appearing on one security blocklist. The page title closely mimics the legitimate legal service, which may mislead visitors into trusting the site.

Users are advised to be cautious and avoid interacting with ra-rick.info or providing any personal or financial details. To stay safe, verify the authenticity of legal websites through official directories or trusted sources before engagement. If you suspect you have shared information on this domain, consider monitoring your accounts for suspicious activity and reporting the incident to appropriate authorities.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: alive (HTTP 530)
- Page title: Rechtsanwalt Christoph Rick | Insolvenzrecht & Sanierung Aichach

## Domain Intelligence
- Registered: 2026-03-13 03:07:02
- Expires: 2027-03-10 06:42:07
- Registrar: NiceNIC International Group Co., Limited
- Country: HK
- IP: 104.21.26.78
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: annalise.ns.cloudflare.com santino.ns.cloudflare.com
- SSL Issuer: Let's Encrypt / E7

## Detection Status
- VirusTotal: 3 vendors flagged
  Vendors: ["Fortinet", "Gridinsoft", "SOCRadar"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019ce53b-773a-75f8-b9af-ae0a1cc9e0e1.png
- PhishDestroy: https://phishdestroy.io/domain/ra-rick.info/
- LLM endpoint: https://phishdestroy.io/domain/ra-rick.info/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/ra-rick.info/
Last updated: 2026-03-19