rikidomains[.]at

Analysis of rikidomains.at indicates that the domain is actively used for a generic phishing campaign as of the report date, July 27, 2026. The domain is delegated to Cloudflare nameservers lindsey.ns.cloudflare.com and sevki.ns.cloudflare.com and resolves to the IP address 188.114.96.3. Registration details show the domain was created through Hosting concepts B.V. via Registrar.eu (nic.at/registrar/648).

Infrastructure monitoring records the domain on a single security blocklist and it is explicitly blocked by the PhishDestroy service. VirusTotal scanned the domain with 91 antivirus and URL‑reputation vendors, none of which reported a detection; the absence of detections does not constitute a safety guarantee. The domain’s current status is listed as active and its risk level is marked under investigation, reflecting limited public intelligence beyond the observed infrastructure.

Defenders should treat rikidomains.at as a malicious indicator: block the domain and its resolving IP at network perimeters, incorporate the domain into internal URL filtering and threat‑intel feeds, and monitor for any related activity originating from the same nameservers or IP range. Continued observation of future scans, blocklist appearances, or changes in hosting configuration is recommended to refine the risk assessment as additional evidence becomes available.