Is comdirect.konto-sicherheit.com safe?

Bank-brand impersonation backed by independent phishing detections

The domain name itself is the first red flag: it uses the comdirect brand but is not the bank's official domain, comdirect.de. The 'konto-sicherheit' suffix is designed to read like an account-security notice from the bank, which is exactly the framing phishing pages use to make a login prompt feel routine.

Independent scanning corroborates that impression. Three antivirus families — G-Data, Heimdal Security and Kaspersky — reported adverse results, and the aggregate engine data shows 3 malicious and 2 suspicious detections out of 93 engines. That is direct, target-bound evidence of a phishing threat, not a category guess.

Geo-blocking hides the page from analysis

Our scanner could not read the site's own page, contact, About or policy text: the server returned HTTP 403 on the first attempt and again when retried as the scanner's own identity. The site's content therefore remains unreviewed.

The screenshot explains why. It shows a German-language access-denied notice stating that access was blocked for security reasons and that access from the US is not allowed. Serving a block page to some visitors while presumably showing a login form to the intended targets is a well-known way for phishing infrastructure to evade automated analysis and to avoid being seen by anyone outside the targeted region.

Two technical checks came back clean — the browser threat feed returned no warning and the saved TLS check found a valid encrypted connection — but neither says anything about who operates the site or what it does with submitted data. A valid certificate is standard on phishing hosts, and a missing Safe Browsing warning simply means the page had not yet been listed at scan time.