Community Intel & Discussions
🚨 Critical Security Alert: Phishing Activity Detected
Risk Category: High-Risk Phishing / Account Takeover
URLert.com has classified theq.ch as a severe security risk following the discovery of active phishing content hosted on its infrastructure. While the domain is officially registered as a personal blog for art and culture, it is currently being utilized to host a sophisticated financial scam targeting banking customers.
Specific Findings:
- Financial Impersonation: A specific subdirectory (
/max-update) is masquerading as a security portal for "MAX" (a financial services provider). The page uses deceptive Hebrew branding ("מקסימום בטיחות וביטחון") to trick users into believing they are performing a mandatory security update. - Detection Evasion: The site employs a "mobile-only" access restriction, instructing users to log in via a phone or tablet. This is a common tactic used by threat actors to bypass desktop-based security crawlers and automated analysis tools.
- Domain Compromise: There is a total lack of alignment between the domain’s primary purpose (art exhibitions) and the presence of financial "security updates." This suggests the site has been compromised by a third party to host malicious payloads.
- High Probability of Credential Theft: The page is designed to harvest sensitive login information under the guise of "Maximum Safety and Security."
RECOMMENDATION: Do not interact with any prompts or enter any credentials on this domain. If you have already submitted information via this site, contact your financial institution immediately to secure your accounts. Avoid accessing the site until the operator has confirmed a full cleanup and removal of the malicious directories.
URL: https://www.theq.ch/max-update
User Assessment: Dangerous
AI Verdict: SUSPICIOUS (60% confidence)
Analysis: This page claims to be a security update for "MAX" and asks you to access it only from a mobile device for security reasons. This is a common tactic used in phishing scams to bypass desktop security measures.
Key Findings:
- The page title and content mention "MAX - מקסימום בטיחות וביטחון" (MAX - Maximum Safety and Security).
- The page states, "Access is limited to mobile devices" and instructs users to "Please log in from your phone or tablet for optimal service."
- The page provides phone numbers for customer service: "*6456 or 1-800-054-054".