MalwareTips rates the day-old rivendellbikeworks.com High Risk (32/100); it copies the history of the genuine bike maker Rivendell Bicycle Works, whose real site is rivbike.com.
Source: malwaretips.com · published
According to a MalwareTips investigation published October 15, 2026, rivendellbikeworks.com is a fraudulent online store that should be avoided. MalwareTips says the site advertises steep discounts and that buyers often receive nothing or poor-quality goods unlike the ads, with returns that may require shipping items to China at high cost. It reports that the store is promoted through spam-like ads on Facebook, Instagram and TikTok using impossibly low prices, urgency and product images copied from legitimate retailers, and that its policy pages are generic or copied, verifiable customer-support details are lacking, and ownership is hidden. Specific findings cited by MalwareTips: the domain was registered on October 13, 2026, one day before the check; the MalwareTips scanner gives it a Safety Score of 32/100 (High Risk); the site presents the history of the genuine California bicycle maker Rivendell Bicycle Works ('Founded in 1994, Rivendell Bicycle Works is a boutique manufacturer') despite the brand-new domain; and its SSL certificate was issued October 13, 2026. MalwareTips describes the site as a scam shop impersonating a genuine retailer; the real Rivendell Bicycle Works operates at rivbike.com.
MalwareTips describes the same playbook for stores in this network. Paid ads on Facebook, Instagram and TikTok use retail hooks such as "Warehouse Sale", "Limited Time" and "Going Out of Business" to rush shoppers to checkout. The ad opens a site that looks like an ordinary shop, with a tidy layout, product photos lifted from established retailers, reviews, delivery promises and policy pages, plus countdown clocks and "low stock" or "only a few left" notices.
After payment, buyers usually get an automatic order confirmation and perhaps a generic "processing" message, and then nothing useful. Either no package arrives, or a cheap item unlike the listing is sent; MalwareTips says sending a token product is deliberate, because it confuses buyers and makes payment disputes harder. "Support" stops replying or sends scripted excuses, and refunds are delayed, reduced or made conditional on posting the goods abroad, often to China, at the buyer's cost and with tracking rules that leave little chance of a refund.
When complaints build up, the operators register another domain, rename the shop and reuse the same designs, ad themes and product photos for a new round of victims.
MalwareTips, "Rivendellbikeworks.com EXPOSED - Shopping Scam Or Legit? Key Findings" (October 15, 2026).
MalwareTips rates comitred.com Dangerous (15/100); it runs on the cloudfastin.top storefront network linked to hundreds of fake stores.
MalwareTips rates the two-month-old suriarra.com High Risk (28/100); it runs on the ojtlnsa.com fake-shop platform.
MalwareTips rates auroriaa.com High Risk (27/100) and ties it to the ojtlnsa.com (XShoppy-based) fake-shop network.
MalwareTips rates the day-old 32degreesco.com High Risk (38/100); it is not the official site of apparel brand 32 Degrees (32degrees.com).
MalwareTips rates stmgoodsofficial.shop Dangerous (12/100); it poses as the real bag maker STM Goods (stmgoods.com) and copies its 'since 1998' history.