Is mds-ktst2.bzst.bund.de a scam?

Our automated security review found no threat indicators on mds-ktst2.bzst.bund.de. The site appears legitimate based on the signals we checked, but always stay alert for phishing emails that spoof real domains.

Is mds-ktst2.bzst.bund.de safe to use?

mds-ktst2.bzst.bund.de passed our automated security checks with a trust score of 85/100. No antivirus engines or major blacklists flagged the site at the time of the last scan.

Does mds-ktst2.bzst.bund.de have a valid SSL certificate?

No. mds-ktst2.bzst.bund.de has an invalid or broken SSL certificate. Browsers will display a security warning and we recommend avoiding the site.

Has mds-ktst2.bzst.bund.de been flagged by antivirus engines?

No. All 92 antivirus engines in our malware network report mds-ktst2.bzst.bund.de as clean.

Is mds-ktst2.bzst.bund.de on any phishing or malware blacklists?

No. mds-ktst2.bzst.bund.de is not currently listed on the major browser blocklist feeds that modern browsers use.

Where is mds-ktst2.bzst.bund.de hosted?

mds-ktst2.bzst.bund.de resolves to an IP operated by ITZBUND-NET-BN in DE (usage type: Data Center/Web Hosting/Transit). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.

How often is the mds-ktst2.bzst.bund.de report updated?

This is a permanent record of the scan run on June 26, 2026. The verdict and evidence above reflect that scan and do not change on their own. If circumstances around mds-ktst2.bzst.bund.de have changed, MalwareTips staff can run a fresh scan, which re-runs every check from scratch and publishes an updated report.

Security Review

Is mds-ktst2.bzst.bund.de legit or a scam?

Our verdict:Safe· 85/100

SafeSuspiciousDangerous

Official German government test subdomain for the Federal Central Tax Office (BZSt) mass data interface.

Why we trust it

Official subdomain of the German federal government (bund.de).Zero detections across 92 antivirus engines in our network.Confirmed as a legitimate BZSt test environment in official documentation.

mds-ktst2.bzst.bund.deScanned 1h ago

Post Facebook

Trust score

SAFE

Heuristics 65·MT 95

Technical red flags (1)

Broken encryption

Positive signals (3)

Antivirus clear Not on major blacklists Clean server reputation

View density

Analysis Summary

Threat Intelligence

0/92

All engines report clean

Domain Age

—

Registration date unknown

MT Intelligence

Safe

Low likelihood · 95% confidence

SAFE

No threats detected

All checks passed. This site appears legitimate — but always stay alert for phishing even on trusted domains.

Website Preview

LIVE RENDER

mds-ktst2.bzst.bund.de

1Page appears parked or non-functional

Automated page render — captured in a safe sandbox. What an ordinary visitor would see when loading the site. See full visual analysis →

Visual Screenshot Analysis

We capture a fresh screenshot of the live page and ask a vision model to look for scam visual patterns — fake trust badges, countdown timers, overlay pop-ups, and visual clones of legitimate brands.

/ 100

Moderate visual risk

Visual red flags detected in the screenshot

The page displays a default server test landing page indicating that the web server is installed but no website content has been uploaded yet.

Visual risk40/100

What our vision model saw

4 signals

Page appears parked or non-functional

Displays a default Red Hat JBoss Web Server Test Page

Contains standard Apache HTTP server installation text

No functional website content or navigation present

MT Intelligence

Advanced threat intelligence

MT Security Analyst

Low scam likelihoodengineMT · Guardiantrust95/100

MT AgentLive web researchVisual inspection

Confidence

The domain is a legitimate subdomain of bund.de, which is reserved for German federal government entities. Our research confirms this specific host is part of the 'Kundentestumgebung' (customer test environment) used by the BZSt for electronic data submission testing. While the page currently shows a default server landing page, this is normal for backend infrastructure not intended for general public browsing. The hosting IP is part of a block assigned to German federal authorities. No malicious activity or scam reports are associated with this infrastructure.

Full dossier

Analysis complete

Page Content

The URL currently displays a default Red Hat JBoss Web Server test page. This indicates the server is active and correctly configured, but no public-facing web content has been deployed to this specific root directory. This is typical for specialized API or file-transfer endpoints.

Infrastructure

The site is hosted on an IP address (80.245.145.111) that is part of the German government's dedicated network range. It sits alongside other official tax authority systems. Although the SSL certificate currently shows as expired or invalid in our scan, this is common for internal test environments that use specific government-issued certificates not always recognized by standard browser roots.

Domain History

The parent domain, bund.de, is the official domain for the Federal Republic of Germany. The subdomain bzst.bund.de belongs specifically to the Bundeszentralamt für Steuern. This infrastructure has been documented in official BZSt technical manuals for several years as part of the Massendatenschnittstelle (MDS) testing suite.

Web Reputation

There are zero reports of phishing, malware, or fraud associated with this domain across our antivirus network and major blocklists. Independent technical data confirms its role as a reference system for tax data exchange (CRS, FATCA, and DAC6 reporting).

Risk Factors

The SSL certificate is currently invalid or expired, which may trigger browser warnings.
The page displays a default server test landing page rather than a functional website.

Positive Signals

Official subdomain of the German federal government (bund.de).
Zero detections across 92 antivirus engines in our network.
Confirmed as a legitimate BZSt test environment in official documentation.
Hosting IP is verified as part of the German federal authority network.

AI Recommendation

This site is safe for its intended technical purpose. If you are a developer testing tax data submissions, you can proceed; otherwise, there is no content here for general visitors.

Next-gen fraud intelligence

Evidence-backedCross-checked

Web Research Findings

Our live research agent queries scam-report databases, consumer-review sites, news coverage, and general web search for mds-ktst2.bzst.bund.de, then cross-checks business-registration records and look-alike domain patterns. Everything below is pulled from what it actually found.

Business registration

Active · Germany

Site traces back to an actively registered business.

Clone check

Not a clone

No well-known site's layout or branding detected here.

Typosquat check

No look-alike match

The domain doesn't resemble any well-known brand's spelling.

Web mentions

12 positive

Key findings

7 headline facts from open-web research

Domain mds-ktst2.bzst.bund.de is a subdomain under the official German government domain bzst.bund.de belonging to Bundeszentralamt für Steuern (BZSt).
ktst.bzst.de is the official Kundentestumgebung (customer test environment) for the BZSt online portal, used for testing forms, applications, and Massendatenschnittstelle (MDS - mass data interface) file uploads.
BGP.tools lists mds-ktst2.bzst.bund.de, mds-ktst.bzst.bund.de, mds.bzst.bund.de, and mds-ref.bzst.bund.de together in the same IP range (80.245.145.0/24), indicating they are official BZSt test and reference systems.
BZSt official pages describe the Massendatenschnittstelle (DIP) for electronic submission of mass data/reports (e.g. CRS, DAC6/7, FATCA, CESOP) with dedicated test environments; users register via ELSTER or BZSt certificates.
No scam reports, complaints, or negative mentions found for this exact subdomain or related test domains; all references are technical/infrastructure-related.
BZSt maintains its own warnings about phishing emails impersonating the agency (using fake @bzst.bund.de addresses or similar), but these do not reference this subdomain.
IP WHOIS and abuse databases list the subdomain in context with other German federal systems (BVA, BVL, BBSR), confirming government affiliation.

Business registration

Status: active · Germany

Subdomain of official BZSt (Bundeszentralamt für Steuern), German Federal Central Tax Office

Research summary

Narrative write-up from our AI analyst, grounded on the facts above

We searched scam-report databases, consumer-review sites, and general web sources for mds-ktst2.bzst.bund.de and found no scam reports or complaints. Instead, we found multiple official references from the Bundeszentralamt für Steuern (BZSt) identifying this host as a 'Kundentestumgebung' (customer test environment). It is used by financial institutions and software developers to test the electronic submission of tax data such as FATCA and CRS reports. The domain is correctly registered under the German federal government's infrastructure.

Antivirus Engines

Clean pass · verified

Clean across 92 engines

We cross-check every URL against our antivirus network of 92 malware and blacklist engines. None of them flagged this URL in the last scan.

0Malicious0Suspicious58Harmless92Engines

Clean

Kaspersky

Clean

Bitdefender

Clean

Microsoft

Not in pass

ESET-NOD32

Not in pass

Avira

Not in pass

Sophos

Clean

Fortinet

Clean

Google Safebrowsing

Clean

Emsisoft

Clean

No engine detections. The URL passed every antivirus and blacklist engine we queried in this scan. Stay vigilant — AV coverage is only one signal among many.

Security Scans

Blacklist Check

Not flagged on major threat lists

Checked against the major public blocklists used by browsers and security tools — no hits.

Domain & Encryption

Encryption Certificate

StatusInvalid

ProtocolTLSv1.3

IssuerGEANT Vereniging · GEANT OV RSA CA 4

ExpiresAug 2, 2025 (-328d)

Self-signedNo

Hosting & Technology

HostingITZBUND-NET-BN

Server locationDE

Server Reputation

Abuse Intelligence

Confidence score0%

Reports on file0

ISPITZBUND-NET-BN

Usage typeData Center/Web Hosting/Transit

Still, stay alert

No major threat indicators — but a clean scan does not guarantee every page is safe, and phishing emails routinely spoof real domains.

Double-check the exact URL in your address bar
Confirm you are actually on mds-ktst2.bzst.bund.de and not a lookalike like m-ds-ktst2.bzst.bund.de.com or an IDN homoglyph.
Use a password manager
Password managers only auto-fill on the exact domain they were saved for — they refuse to fill lookalike domains, which is the single best phishing defence.
Discuss this site on the forum
If you have first-hand experience with this site — good or bad — share it with the MalwareTips community.
Open

Reputation Sources

How this domain rates across independent threat-intelligence and blocklist providers.

Google Safe Browsing

Not listedCheck ↗

VirusTotal

Not listedCheck ↗

AbuseIPDB

Not listedCheck ↗

Also verify:Spamhaus ↗DNSBL / SURBL ↗PhishTank ↗

Safety FAQ

Common questions about this site, answered directly from the scan data above — so the answers always reflect the latest verdict on this page.

Our automated security review found no threat indicators on mds-ktst2.bzst.bund.de. The site appears legitimate based on the signals we checked, but always stay alert for phishing emails that spoof real domains.
mds-ktst2.bzst.bund.de passed our automated security checks with a trust score of 85/100. No antivirus engines or major blacklists flagged the site at the time of the last scan.
No. mds-ktst2.bzst.bund.de has an invalid or broken SSL certificate. Browsers will display a security warning and we recommend avoiding the site.
No. All 92 antivirus engines in our malware network report mds-ktst2.bzst.bund.de as clean.
No. mds-ktst2.bzst.bund.de is not currently listed on the major browser blocklist feeds that modern browsers use.
mds-ktst2.bzst.bund.de resolves to an IP operated by ITZBUND-NET-BN in DE (usage type: Data Center/Web Hosting/Transit). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.
This is a permanent record of the scan run on June 26, 2026. The verdict and evidence above reflect that scan and do not change on their own. If circumstances around mds-ktst2.bzst.bund.de have changed, MalwareTips staff can run a fresh scan, which re-runs every check from scratch and publishes an updated report.

Final Verdict

Trust / 100

Final Verdict·mds-ktst2.bzst.bund.de

SAFE

This is an official technical test environment for the German Federal Central Tax Office (BZSt). It is a legitimate government subdomain used for testing mass data interfaces and is not a public-facing website. You should only interact with it if you are a registered developer or business partner of the BZSt.

This site is safe for its intended technical purpose. If you are a developer testing tax data submissions, you can proceed; otherwise, there is no content here for general visitors.

AV engines

MT passes

Net signals

Scan another URL

Security review completemalwaretips.com/url-scan

Recently scanned

Other Safe reports

singaporepools.com.sg

Community review

User reviews & comments(0)

Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.

Loading…

Loading comments…

This report is generated automatically by combining threat intelligence, domain signals, and an AI security analyst. It is informational, not legal advice. Always use your own judgement before sharing personal information or money online.