Is riccardoricci.co safe?

A redirect shell in front of a Shopify clothing shop

Typing riccardoricci.co does not open a store. The browser is sent to www.riccardoricci.co and then across to www.riccardorricci.com, a different registrable domain, where the actual shop lives. The .co domain is about 2 years 2 months old and its registration is privacy-protected, so the entry point and the storefront are linked but not the same asset.

The storefront is a standard Shopify shop: a serif "Riccardo Ricci" wordmark, a "FREE DELIVERY ON ALL ORDERS" bar, a hero image of a man in a blue shirt in front of a Tuscan-style villa, and a "60% OFF: AUTUMN SALE" headline over a "SHOP NOW" button. Category links for shirts, polos, trousers, footwear, full outfits and a linen collection all stay on the same domain, and the cart and order tracking are the shop's own pages.

The discount framing is inconsistent: the site-wide banner promises up to 60% off, while individual products show small absolute savings such as "SAVE $1.05" next to a CALORE SHIRT reduced from $76.00 to $43.95. The hero photograph has a polished stock or AI-generated look with no product detail, price or shipping terms visible in the first screen.

Fraud-shop listings and low trust scores on both domains

Watchlist Internet, an Austrian consumer protection project, has riccardorricci.com on its list of fraudulent shops, entered on 16 September 2026. Its entry states plainly that anyone ordering there receives either no goods at all or completely wrong goods despite having paid.

Gridinsoft describes riccardorricci.com as a fraudulent e-commerce site that takes payments and steals personal data through fraudulent tactics, and marks the .co address as a suspicious shop. An independent site-rating service gives both riccardoricci.co and riccardorricci.com very low trust scores and says it thinks the .co site may be a scam.

These are third-party assessments rather than behaviour we watched happen on this scan, which is why the score sits in the High Risk band rather than lower. A TikTok-style profile mirror promoting "Old Money Style for Less" under a similar handle was also found, but it is only a social presence and adds no independent verification of the shop.

Clean technical checks, unclear operator

Nothing malicious was observed technically: the browser threat feed returned no threat warning, the saved TLS check found a valid encrypted connection, and the hosting IP carries an abuse confidence score of 0/100 across 23 saved reports. The single suspicious antivirus verdict comes from one engine in a saved, stale observation, so it is a weak signal rather than a confirmed detection.

The risk sits with the operator. Because the scanned address redirects to another site, that site's contact details were not attributed to riccardoricci.co, and the landing page itself was read without yielding a verifiable company identity. The shop does publish support, contact, returns and terms pages and a contact form asking for name, email and phone number, but none of that establishes who is behind it or that orders ship.