Is bilecki-kamen.com safe? TrustSniffer's low-trust assessment: 40/100

Overview

bilecki-kamen.com is a regional natural-stone supplier and processor presenting product descriptions, stone variants, custom-order options, contact channels, and a gallery for prospective customers seeking interior, exterior, and construction materials.

Scam/Impersonation Risk

The site’s visible content is consistent with a small local commerce operation and contains no login form, credential-collection mechanism, hidden form, wallet connection, or observed malicious browser behavior. However, this benign presentation is materially outweighed by external threat intelligence: the domain is recorded as blacklisted, with multiple malicious and suspicious detections, and the broader assessment identifies a known phishing-related signal. No brand impersonation or conflicting legal-entity identity was observed, but the external detections constitute a direct contradiction to the site’s ordinary product-catalogue presentation and make account, credential, or financial interactions inappropriate without independent confirmation. Evidence:

• The homepage presents a natural-stone catalogue, custom processing, phone, email, WhatsApp, social links, and a gallery rather than an authentication or payment interface.
• Behavioral testing recorded 0 external XHR/fetch requests, 0 hidden forms, 0 password-external forms, 0 wallet-provider detections, and 0 wallet-drainer runs across 2 successful runs.
• External reputation evaluation recorded 2 malicious detections and 1 suspicious detection; the domain was also marked blacklisted.
• Domain registration: 2011-07-26; age 15.08 years. Archive coverage: 52 snapshots spanning 2012–2026, tracked across 15 years.

Regulatory Verification Notes

The available pages identify the business through its stone products and local contact details, but the site does not present a licensing claim or registration number. For a materials supplier, this is primarily a business-identity and transaction-verification issue rather than evidence of a regulated financial activity. The apparent operator connection is assessed as likely rather than independently verified, and the site’s low authority profile provides limited additional assurance. Evidence:

• The homepage and About/Contact content describe stone processing and sales but do not state a licensing authority or license number.
• The site’s transport encryption uses a DV certificate issued by YR2, valid through 2026-09-29.
• Hosting resolves to AS207604, UNITED - United Internet Ltd., RS, in the Netherlands.
• The site links to Facebook, Instagram, and WhatsApp, providing external channels that can be checked for consistent business details.

What to Verify Next

Before any order, advance payment, document exchange, or other sensitive interaction, the prospective counterparty should independently confirm the supplier’s legal trading identity, physical operating details, and payment beneficiary through an offline or independently sourced channel. Product specifications, delivery terms, returns, invoice details, and the authenticity of linked social accounts should also be reconciled before commitment. Evidence:

• The homepage provides a named mobile contact and direct-order model, allowing the counterparty details to be corroborated independently.
• The product catalogue describes multiple processed-stone variants and made-to-order work, so quotations and delivery obligations should be confirmed in writing.
• The absence of a stated license or registration number means any applicable business registration should be checked with the relevant local registry.

Summary Verdict

The overall posture is low trust with elevated sensitive-interaction risk. Although the site’s content and observed behavior resemble a conventional local product catalogue, the external threat detections and confirmed blacklist status prevent the website from being treated as trustworthy for sensitive activity, and the real-world operator remains only likely rather than verified.

Infrastructure Integrity

The site is directly hosted on AS207604, operated by UNITED - United Internet Ltd., RS, with no CDN or WAF detected and one likely origin address exposed. Its DV TLS certificate, issued by YR2 and currently valid, protects transport confidentiality but does not establish the operator’s legitimacy or offset the external reputation concerns.

Closing Assessment

Treat the website as suitable only for limited, non-sensitive inspection until the business identity, transaction terms, and payment arrangements have been independently corroborated; sensitive interactions should remain suspended unless those checks produce consistent results.