J&T Express

Postal & parcel Indonesiajtexpress.comRank 187 of the most impersonated
Cert findings · 24 h
0
Cert findings · 7 days
3
3 on phishing hosts
Registered lookalikes
115
3 listed by a source or an address list
Official domains
12
verified from J&T Express's own sites and records

Certificate findings for J&T Express

Updated hourly · 2026-11-05 10:53 UTC

DomainSpoof matched these hostnames, from public certificate logs, to J&T Express's name or to lookalike spellings of its official domains. Each was reported or listed by one of our sources, or resolved to an address on Spamhaus DROP or DomainSpoof's phishing-host list.

Published now · 3 findings, grouped by hostname

  1. jtexpress.com.ph NL · AS43350 · NFORCE NForce Entertainment…2 addresses
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    jtexpress.com.ph
    First seen
    2026-11-04 09:04 UTC
    First published
    2026-10-28 07:41 UTC
    DNS
    Resolves · checked 2026-11-05 09:05 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 212.92.105.196.
    1. Phishing-host list fetched with the address
    2. Resolved to 212.92.105.196
    Brand
    J&T Express
    Addresses
    212.92.105.196 · Netherlands · AS43350 NFORCE NForce Entertainment B.V.
    172.93.103.101 · United States · AS23470 RELIABLESITE - ReliableSite.Net LLC
    Domain
    jtexpress.com.ph
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 11:04 UTC

    Suggest a correction

  2. www.jtexpress.ru RU · AS49505 · SELECTEL JSC Selectel
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    www.jtexpress.ru
    First seen
    2026-10-31 23:21 UTC
    First published
    2026-10-31 23:50 UTC
    DNS
    Resolves · checked 2026-11-04 23:58 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 188.246.224.242.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 188.246.224.242
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-10-31 22:18 UTC to 2027-01-29 22:18 UTC
    Logged 2026-10-31 23:16 UTC in Google ParcelYard2027h1, entry 546,565,088
    SHA-256 5d920370b900b308a3c869e7bac5dcd3f6f3f4044cc2bde9b09e7e4c68482a1e
    Public key SHA-256 394438d1c4ad71a16f5e3e65d301a6cac810679ad1608b13ae1dc709971bfb11
    Brand
    J&T Express
    Addresses
    188.246.224.242 · Russia · AS49505 SELECTEL JSC Selectel
    Domain
    jtexpress.ru
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 00:33 UTC

    Suggest a correction

  3. jtexpress.ru RU · AS49505 · SELECTEL JSC Selectel
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    jtexpress.ru
    First seen
    2026-10-31 23:21 UTC
    First published
    2026-10-31 23:50 UTC
    DNS
    Resolves · checked 2026-11-04 23:58 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 188.246.224.242.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 188.246.224.242
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-10-31 22:18 UTC to 2027-01-29 22:18 UTC
    Logged 2026-10-31 23:16 UTC in Google ParcelYard2027h1, entry 546,565,088
    SHA-256 5d920370b900b308a3c869e7bac5dcd3f6f3f4044cc2bde9b09e7e4c68482a1e
    Public key SHA-256 394438d1c4ad71a16f5e3e65d301a6cac810679ad1608b13ae1dc709971bfb11
    Brand
    J&T Express
    Addresses
    188.246.224.242 · Russia · AS49505 SELECTEL JSC Selectel
    Domain
    jtexpress.ru
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 00:33 UTC

    Suggest a correction

How certificate findings are selected

Reported: PhishTank or PhishDestroy reports the hostname as phishing. Listed: CERT Polska, MetaMask, USOM, MODA, NPA 165, JPCERT/CC, the AMF, the FSMA or BaFin lists it, in the source's own category. Phishing host: the name resolves to an address on DomainSpoof's phishing-host list, the addresses that hosted confirmed phishing in the last 48 hours. Spamhaus DROP: it resolves to an address on the Spamhaus DROP list. Same certificate: it shares a certificate with a finding and has listing evidence of its own, a report or listing by a source or its own Spamhaus DROP address.

DomainSpoof reads public certificate logs and the feeds on Sources every hour. A hostname matches J&T Express when a label carries the brand's name, by the rules on How it works. A lookalike spelling of an official domain matches too. A hostname with two kinds of finding is one row. Details shows the recorded checks, the source's claim and the check times available. How it works · Sources

More brands in Postal & parcel

All brands →