If you've landed on comericabank.group, you might think you're logging into your Comerica Bank account. You're not. This is a classic phishing site: the domain name is a slight twist on the real thing, the design copies the official brand, and it asks for your credentials. But the security is nonexistent — no HTTPS means anything you type is sent in plain text. Google Safe Browsing has already flagged it as an active social engineering threat. Most legitimate banks require SSL encryption and have years of history you can verify. This domain is brand new, has no privacy policy or terms of service, and the only payment method mentioned is wire transfer, which cannot be reversed. The WHOIS info is hidden behind a .group TLD that doesn't give you any owner details. If you've already entered your login details on this site, contact Comerica's real fraud department immediately. Do not click any links in emails that direct you here.
No — comericabank.group doesn't look safe
In plain English
This is not Comerica Bank. It's a website designed to look like their login page, but it has no encryption, it's flagged by Google for phishing, and it's only days old. Don't enter any personal or financial information here.
What you should do now
Don't panic. These steps limit the damage, and the sooner you take them the better.
Don't enter any details
No passwords, card numbers or personal information — even if the site looks professional.
Close the tab
Especially if you got here from an email, text message or social media ad.
Already paid? Call your bank
Contact your bank or card provider right away. They can often stop or reverse a recent payment.
Warn others
Report the site and share this check with anyone who sent you the link.
Where the score comes from
This site fails the most basic security test: no HTTPS connection. Combined with a Google Safe Browsing flag for social engineering, it's a textbook phishing setup.
The domain name is designed to trick you into thinking it's Comerica Bank. There's no verifiable owner, and the .group TLD hides behind a registrar that doesn't expose WHOIS data.
It's brand new, unranked, and already on a spam blacklist. No history means no track record to judge by, which is always a warning sign for a financial site.
The About and Contact pages exist, but they're likely fake. The site masquerades as a major bank without social media presence or real-world addresses you can verify.
A site asking for logins and payments must have a privacy policy and terms of service. This one has neither. Also, it pushes wire transfers, which are irreversible if something goes wrong.
The technical setup is basic but functional: fast load, a sitemap, and some security headers. Nothing here saves it from the catastrophic failures in security and identity.
What we checked
Think this verdict is wrong?
Site owners can request a fresh scan. Scores update automatically as signals change.