This website is a personal blog by Tobi von Wartburg documenting art exhibitions, cultural events, and personal collections in the Central Switzerland region. It serves as a digital archive for past gallery projects and current cultural interests.
๐จ Critical Security Alert: Phishing Activity Detected
Risk Category: High-Risk Phishing / Account Takeover
URLert.com has classified theq.ch as a severe security risk following the discovery of active phishing content hosted on its infrastructure. While the domain is officially registered as a personal blog for art and culture, it is currently being utilized to host a sophisticated financial scam targeting banking customers.
Specific Findings:
- Financial Impersonation: A specific subdirectory (
/max-update) is masquerading as a security portal for "MAX" (a financial services provider). The page uses deceptive Hebrew branding ("ืืงืกืืืื ืืืืืืช ืืืืืืื") to trick users into believing they are performing a mandatory security update. - Detection Evasion: The site employs a "mobile-only" access restriction, instructing users to log in via a phone or tablet. This is a common tactic used by threat actors to bypass desktop-based security crawlers and automated analysis tools.
- Domain Compromise: There is a total lack of alignment between the domainโs primary purpose (art exhibitions) and the presence of financial "security updates." This suggests the site has been compromised by a third party to host malicious payloads.
- High Probability of Credential Theft: The page is designed to harvest sensitive login information under the guise of "Maximum Safety and Security."
RECOMMENDATION: Do not interact with any prompts or enter any credentials on this domain. If you have already submitted information via this site, contact your financial institution immediately to secure your accounts. Avoid accessing the site until the operator has confirmed a full cleanup and removal of the malicious directories.