Verdict
bike-smile.sk shows high-risk / scam indicators.
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
| What this site appears to be | A bike rental website booking/checkout page (Bike Smile) in Slovak/Czech with calendar picker, accessory selection, price summary, and contact form requesting name, email, phone, address/hotel and passport/ID number. Includes consent for deposit payment and GDPR checkbox. |
|---|
Evidence status and limitations
Evidence completeness: UNKNOWN
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 6 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0 reportsAbuseIPDB; shared hosting inflates this count | Noted |
| Domain age | 7.3 years oldRegistered history | Clear |
| Web archive | Archived since 2020Public history exists | Clear |
| Certificate | Encrypted connectionIssued by YR2 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: 3 to 10 years (registration continuity).
- Public web-archive history exists since 2020.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Security Alert
Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.
Bike Smile is a Slovak/Czech-language online bicycle-rental and accessories booking service. Its homepage presents bicycle selection, rental-date scheduling, accessory options, pricing, booking submission, deposit consent, and collection of customer contact and identification details for the apparent purpose of arranging bicycle rentals.
Scam/Impersonation Risk
The site carries a critical interaction risk because external threat-intelligence detections are present and the domain is listed by external blacklist sources. This is a direct contradiction to treating the booking flow as suitable for sensitive interaction, particularly because the homepage requests a passport or identity-card number, accommodation details, telephone number, and consent to a deposit. The page-level content also identifies an unverifiable contact or address detail, weakening the ability to independently connect the booking operation to a legitimate rental business. No separate brand-impersonation or conflicting legal-entity finding was established, but the confirmed blacklist status is sufficient for a clearly cautionary assessment.
- The homepage booking form requests a name, email address, telephone number, address or hotel room, and passport or identity-card number.
- The homepage requires consent to a cash deposit and GDPR terms before order submission.
- External reputation checks recorded 6 malicious detections from 11 evaluated results, including Fortinet, and confirmed a blacklist hit from VT and EXTERNAL_BLACKLIST.
- The homepage was classified as a booking/checkout page with the specific red flag “unverifiable_contact_or_address.”
Regulatory Verification Notes
The available material does not independently verify the real-world operator behind Bike Smile. The site presents rental terms and GDPR consent language, but the supplied page content does not establish a corporate legal name, licensing or registration number, or a verifiable business address. These are disclosure and verification gaps rather than standalone proof of fraud; however, in combination with the external threat detections, they materially reduce confidence in using the service for payment or identity submission. The absence of a WikiFX-like broker match provides no licensing or regulatory conclusion.
- The homepage contains links or labels for “Záloha,” “Cenník,” “VOP,” and “Kontaktujte nás,” but the supplied content does not show a legal entity name or license number.
- The domain was registered on 2019-04-24 and is approximately 7.33 years old, with Websupport s.r.o. as registrar.
- The domain archive record reports 62 snapshots from 2020 through 2026, covering 7 tracked years.
- Hosted on AS51013 (WebSupport s.r.o., SK); the TLS certificate is issued by YR2 at DV validation level and is valid to 2026-11-12.
What to Verify Next
Before any engagement, an independent party should confirm that the rental business and physical contact details exist through an offline or independently sourced channel, rather than relying solely on the website. Any claimed business registration, consumer terms, deposit policy, refund process, and data-retention practice should be checked against the relevant Slovak registry or applicable consumer authority. Payment should not proceed unless the payment recipient, transaction protections, and dispute or chargeback route are independently established; passport or identity-card information should not be submitted until the operator’s identity and lawful data-handling basis are confirmed.
- The homepage collects identity-document information through a single sensitive booking form.
- The supplied content shows a deposit-consent mechanism but does not establish the identity of the payment recipient.
- The homepage presents “VOP” and GDPR consent, requiring independent review of the underlying terms and privacy disclosures.
- The site’s contact and address information was specifically identified as unverifiable in the page analysis.
Summary Verdict
Available evidence supports a critical trust posture for this website. The combination of confirmed external blacklist detections, unverified operator identity, sensitive data collection, and unresolved business-contact verification issues makes the site unsuitable for credentials, identity-document submission, deposits, or other financial interaction.
Infrastructure Integrity
The site resolves directly to infrastructure associated with WebSupport s.r.o. in Slovakia, with no trusted CDN or WAF detected and two likely origin IP candidates. The hosting arrangement provides identifiable network attribution but does not mitigate the confirmed external reputation risk.
Closing Assessment
The appropriate institutional response is to suspend sensitive interaction with the site and obtain independent confirmation of the operator and payment arrangements before reconsidering engagement.
Written analysis generated 2026-08-19 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
2 findings contributed to this verdict, raised by registration and ownership, analysis engine, behaviour in a sandbox, external reputation.
01 Governance Risk
- The public registration record for this domain is incomplete.Registration and ownership
rule:KF_WHOIS_INCOMPLETE
02 Sensitive Interaction Risk
- The analysis matched a pattern TrustSniffer treats as a direct threat to a visitor.Analysis engine
signal:direct_threat - The page rewrote itself after it was interacted with, so what a visitor first sees is not what they end up on.Behaviour in a sandbox
rule:BEHAV_DOM_DIFF_AFTER_INTERACTION - The structure of the page changed sharply while it was loading.Behaviour in a sandbox
rule:BEHAV_DOM_DENSITY_SPIKE - The page sent data to a destination TrustSniffer does not recognise.Behaviour in a sandbox
rule:BEHAV_NONWHITELISTED_POSTS - Most of what the page loaded came from other domains rather than from this one.Behaviour in a sandbox
rule:BEHAV_EXTERNAL_RATIO_HIGH - An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it.External reputation
rule:EXT_BLACKLIST_CRITICAL
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 30/100 |
| Identity verification confidence | 50% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of bike-smile.sk.
- The request stayed on bike-smile.sk. It was not redirected to another domain. Clear
- Registration is published under Websupport s.r.o.. Clear
- DNS for this domain is served by websupport.sk, across 3 name servers. Noted
- The registration is paid up to 2027-04-24. Noted
- The earliest public archive of this site is from 2020-08-04. Clear
- It is hosted on WEBSUPPORT-SRO-SK-AS, from a server in SK. Noted
Domain intelligence
| Registrar | Websupport s.r.o. |
|---|---|
| Hosting | WEBSUPPORT-SRO-SK-AS - WebSupport s.r.o., SK |
| Country | SK |
| Server IP | 2a00:4b40:aaaa:2004::6 |
| Name servers | ns1.websupport.sk, ns2.websupport.sk, ns3.websupport.sk |
| SSL issuer | YR2 |
| SSL expiry | 2026-11-12 |
| Domain age | 7.33 years (continuous registration) |
| Domain expiry | 2027-04-24 |
| Archive first seen | 2020-08-04 |
| Archive snapshots | Not counted (archive lookup incomplete) |
| Reputation | VirusTotal: 6 flagged | AbuseIPDB: 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about bike-smile.sk at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.