Swiss Post
Certificate findings for Swiss Post
DomainSpoof matched these hostnames, from public certificate logs, to Swiss Post's name or to lookalike spellings of its official domains. Each was reported or listed by one of our sources, or resolved to an address on Spamhaus DROP or DomainSpoof's phishing-host list.
Published now · 9 findings, grouped by hostname
- fxeow.swisspostinfo.com DE · AS206834 · TEAMINTERNET-CA-AS Team Int…ReportedParking page · ParkingCrew (Team Internet)Under swisspostinfo.com, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 5 mo ago
DetailsHide details for fxeow.swisspostinfo.com
- Hostname
- fxeow.swisspostinfo.com
- First seen
- 2026-11-04 03:16 UTC
- First published
- 2026-11-04 04:15 UTC
- Listing
- PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
- DNS
- Resolves · checked 2026-11-05 04:28 UTC
- Reported
- PhishDestroy, listing swisspostinfo.com and the names under it
- Observed in the PhishDestroy feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YE1Valid 2026-11-04 02:13 UTC to 2027-02-02 02:12 UTCLogged 2026-11-04 03:11 UTC in Google PlumbersArms2027h1, entry 601,739,872SHA-256 0bbe4953311c3179126c05095bab79fb691b8b35301167e59b83eaba61093102Public key SHA-256 4aa6139821e8d6e0f1834554e272fcf159cf939ed24880542e55212ffe224fea
- PhishDestroy
- Brand
- Swiss Post
- Addresses
- 185.53.179.136 · Germany · AS206834 TEAMINTERNET-CA-AS Team Internet AG · ParkingCrew (Team Internet) (parking page)
- Parking page · ParkingCrew (Team Internet)
- ParkingCrew (Team Internet) (185.53.179.136): a parking service. It answers for names that are typically for sale or unused.
- Domain
- swisspostinfo.com
- Registered
- 2026-06-02 · Hosting Concepts B.V. d/b/a Registrar.eu
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-04 18:19 UTC
- ty8qf.swisspostinfo.com DE · AS206834 · TEAMINTERNET-CA-AS Team Int…ReportedParking page · ParkingCrew (Team Internet)Under swisspostinfo.com, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 5 mo ago
DetailsHide details for ty8qf.swisspostinfo.com
- Hostname
- ty8qf.swisspostinfo.com
- First seen
- 2026-11-03 18:00 UTC
- First published
- 2026-11-03 18:16 UTC
- Listing
- PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
- DNS
- Resolves · checked 2026-11-04 18:20 UTC
- Reported
- PhishDestroy, listing swisspostinfo.com and the names under it
- Observed in the PhishDestroy feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YE2 · precertificateValid 2026-11-03 17:00 UTC to 2027-02-01 17:00 UTCLogged 2026-11-03 17:59 UTC in DigiCert Wyvern2027h1, entry 391,614,418SHA-256 6e9d03ead706e9d8ebddfb6466a3ad1d6fe73ba1e9ac73baabeae225c295c1cdPublic key SHA-256 4aa6139821e8d6e0f1834554e272fcf159cf939ed24880542e55212ffe224fea
- PhishDestroy
- Brand
- Swiss Post
- Addresses
- 185.53.179.136 · Germany · AS206834 TEAMINTERNET-CA-AS Team Internet AG · ParkingCrew (Team Internet) (parking page)
- Parking page · ParkingCrew (Team Internet)
- ParkingCrew (Team Internet) (185.53.179.136): a parking service. It answers for names that are typically for sale or unused.
- Domain
- swisspostinfo.com
- Registered
- 2026-06-02 · Hosting Concepts B.V. d/b/a Registrar.eu
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-04 18:19 UTC
- postch.bond HK · AS152194 · CTG Server LimitedSpamhaus DROPAddress listed by Spamhaus DROPMX absentSPF missingDMARC missingRegistered 3 mo ago
DetailsHide details for postch.bond
- Hostname
- postch.bond
- First seen
- 2026-10-31 22:57 UTC
- First published
- 2026-10-31 23:50 UTC
- DNS
- Resolves · checked 2026-11-04 23:58 UTC
- Spamhaus DROP
- A brand lookalike resolving to an address on the Spamhaus Don’t Route Or Peer list. Address 134.122.190.28.
- Spamhaus DROP list fetched with the address
- Certificate logged in CT
- Resolved to 134.122.190.28
- Latest DNS check
- Certificate
- Issued by Sectigo Public Server Authentication CA DV E36Valid 2026-10-31 00:00 UTC to 2027-01-17 13:20 UTCLogged 2026-10-31 22:55 UTC in DigiCert Sphinx2027h1, entry 325,219,755SHA-256 2641f0c8993b964047e383a031f79d839d02a0a4b7d8fcbd2f112e2a7d1e8e8fPublic key SHA-256 49bb304ccb99e68ef23076aa35c2f8b42b0caf452eb352f714ed57a409eb0a31
- Brand
- Swiss Post
- Addresses
- 134.122.190.28 · Hong Kong · AS152194 CTGSERVERLIMITED-AS-AP - CTG Server Limited
- Domain
- postch.bond
- Registered
- 2026-08-10 · Spaceship, Inc.
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 00:33 UTC
- www.postch-ch.icu MD · AS200019 · AlexHost ALEXHOST S.R.L.2 addressesPhishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF missingDMARC missingRegistered 7 mo ago
DetailsHide details for www.postch-ch.icu
- Hostname
- www.postch-ch.icu
- First seen
- 2026-10-31 17:26 UTC
- First published
- 2026-10-29 20:34 UTC
- DNS
- Resolves · checked 2026-11-04 20:44 UTC
- Phishing host
- A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 91.199.133.247.
- Phishing-host list fetched with the address
- Certificate logged in CT
- Resolved to 91.199.133.247
- Latest DNS check
- Certificate
- Issued by YE1 · precertificateValid 2026-10-31 16:25 UTC to 2027-01-29 16:25 UTCLogged 2026-10-31 17:24 UTC in IPng Networks Gouda2027h1, entry 279,688,227SHA-256 609f648bed67ebf97bc838c76f251d575545b1f385de78abce0e6ef997eea456Public key SHA-256 65dc3afe7c1d9fb34b8639ff929f3e5bba4f2806643c7fbfbbcf2f7e5807992c
- Brand
- Swiss Post
- Addresses
- 91.199.133.247 · Moldova · AS200019 AlexHost ALEXHOST S.R.L.85.121.4.201 · Moldova · AS200019 AlexHost ALEXHOST S.R.L.
- Domain
- postch-ch.icu
- Registered
- 2026-04-13 · PDR Ltd. d/b/a PublicDomainRegistry.com
- MX
- Receives mail at mx.postch-ch.icu
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 01:50 UTC
- postch-ch.icu MD · AS200019 · AlexHost ALEXHOST S.R.L.2 addressesPhishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF missingDMARC missingRegistered 7 mo ago
DetailsHide details for postch-ch.icu
- Hostname
- postch-ch.icu
- First seen
- 2026-10-31 17:26 UTC
- First published
- 2026-10-29 20:34 UTC
- DNS
- Resolves · checked 2026-11-04 20:44 UTC
- Phishing host
- A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 91.199.133.247.
- Phishing-host list fetched with the address
- Certificate logged in CT
- Resolved to 91.199.133.247
- Latest DNS check
- Certificate
- Issued by YE1 · precertificateValid 2026-10-31 16:25 UTC to 2027-01-29 16:25 UTCLogged 2026-10-31 17:24 UTC in IPng Networks Gouda2027h1, entry 279,688,227SHA-256 609f648bed67ebf97bc838c76f251d575545b1f385de78abce0e6ef997eea456Public key SHA-256 65dc3afe7c1d9fb34b8639ff929f3e5bba4f2806643c7fbfbbcf2f7e5807992c
- Brand
- Swiss Post
- Addresses
- 91.199.133.247 · Moldova · AS200019 AlexHost ALEXHOST S.R.L.85.121.4.201 · Moldova · AS200019 AlexHost ALEXHOST S.R.L.
- Domain
- postch-ch.icu
- Registered
- 2026-04-13 · PDR Ltd. d/b/a PublicDomainRegistry.com
- MX
- Receives mail at mx.postch-ch.icu
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 01:50 UTC
- dkospx9.suisse-postch.com DE · AS206834 · TEAMINTERNET-CA-AS Team Int…ReportedParking page · ParkingCrew (Team Internet)Under suisse-postch.com, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 5 mo ago
DetailsHide details for dkospx9.suisse-postch.com
- Hostname
- dkospx9.suisse-postch.com
- First seen
- 2026-10-29 18:21 UTC
- First published
- 2026-10-29 18:29 UTC
- Listing
- PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
- DNS
- Resolves · checked 2026-11-04 18:34 UTC
- Reported
- PhishDestroy, listing suisse-postch.com and the names under it
- Observed in the PhishDestroy feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YE1Valid 2026-10-29 17:17 UTC to 2027-01-27 17:17 UTCLogged 2026-10-29 18:16 UTC in Google PlumbersArms2027h1, entry 510,657,758SHA-256 242b63eb48d77707b4142eb5a6a2150d50b4f310e782a8a8712cbe4cfdba897aPublic key SHA-256 51c7a5d8da73e6aff80345dac7abecbd30858b73a6ca30d84cc70e9e9410b657
- PhishDestroy
- Brand
- Swiss Post
- Addresses
- 185.53.179.136 · Germany · AS206834 TEAMINTERNET-CA-AS Team Internet AG · ParkingCrew (Team Internet) (parking page)
- Parking page · ParkingCrew (Team Internet)
- ParkingCrew (Team Internet) (185.53.179.136): a parking service. It answers for names that are typically for sale or unused.
- Domain
- suisse-postch.com
- Registered
- 2026-05-27 · Hosting Concepts B.V. d/b/a Registrar.eu
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 03:07 UTC
- login.suisse-postch.com DE · AS206834 · TEAMINTERNET-CA-AS Team Int…ReportedParking page · ParkingCrew (Team Internet)Under suisse-postch.com, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 5 mo ago
DetailsHide details for login.suisse-postch.com
- Hostname
- login.suisse-postch.com
- First seen
- 2026-10-28 23:51 UTC
- First published
- 2026-10-29 00:30 UTC
- Listing
- PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
- DNS
- Resolves · checked 2026-11-05 00:41 UTC
- Reported
- PhishDestroy, listing suisse-postch.com and the names under it
- Observed in the PhishDestroy feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YE1 · precertificateValid 2026-10-28 22:50 UTC to 2027-01-26 22:50 UTCLogged 2026-10-28 23:49 UTC in Geomys Tuscolo2027h1, entry 388,132,669SHA-256 cb4f454b82ec4ddfdc2ab5e51252a8eccb2efbd9269805bcf309b5c85193ff94Public key SHA-256 51c7a5d8da73e6aff80345dac7abecbd30858b73a6ca30d84cc70e9e9410b657
- PhishDestroy
- Brand
- Swiss Post
- Addresses
- 185.53.179.136 · Germany · AS206834 TEAMINTERNET-CA-AS Team Internet AG · ParkingCrew (Team Internet) (parking page)
- Parking page · ParkingCrew (Team Internet)
- ParkingCrew (Team Internet) (185.53.179.136): a parking service. It answers for names that are typically for sale or unused.
- Domain
- suisse-postch.com
- Registered
- 2026-05-27 · Hosting Concepts B.V. d/b/a Registrar.eu
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 03:07 UTC
- swiss-post-ch.com SC · AS403005 · BlatantPhishing hostSpamhaus DROPAddress hosted confirmed phishing in the last 48 h · Address listed by Spamhaus DROPMX absentSPF missingDMARC missingRegistered 14 d ago
DetailsHide details for swiss-post-ch.com
- Hostname
- swiss-post-ch.com
- First seen
- 2026-10-27 23:42 UTC
- DNS
- Not resolving since 2026-11-02 · checked 2026-11-05 08:52 UTC
- Checks
- Overdue since 2026-11-02 08:51 UTC
- Phishing host
- A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 64.89.161.67.
- Resolved to 64.89.161.67
- Phishing-host list fetched with the address
- Spamhaus DROP
- A brand lookalike resolving to an address on the Spamhaus Don’t Route Or Peer list. Address 64.89.161.67.
- Spamhaus DROP list fetched with the address
- Certificate logged in CT
- Resolved to 64.89.161.67
- Certificate
- Issued by YR2 · precertificateValid 2026-10-27 22:38 UTC to 2027-01-25 22:38 UTCLogged 2026-10-27 23:36 UTC in Let's Encrypt Willow2027h1, entry 804,973,780SHA-256 83d642c44e77495cdcdb2fe8051e7b12c33695e4a1ce32cb0cedb9c6811f9780Public key SHA-256 ec7043b0e0d104a9ca173d6e1431d585ab17b8ba5e3562b4edac7792cee2ba45
- Brand
- Swiss Post
- Addresses
- 64.89.161.67 · Seychelles · AS403005 BLATANTHOST - Blatant
- Domain
- swiss-post-ch.com
- Registered
- 2026-10-22 · Gransy, s.r.o.
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 08:35 UTC
How certificate findings are selected
Reported: PhishTank or PhishDestroy reports the hostname as phishing. Listed: CERT Polska, MetaMask, USOM, MODA, NPA 165, JPCERT/CC, the AMF, the FSMA or BaFin lists it, in the source's own category. Phishing host: the name resolves to an address on DomainSpoof's phishing-host list, the addresses that hosted confirmed phishing in the last 48 hours. Spamhaus DROP: it resolves to an address on the Spamhaus DROP list. Same certificate: it shares a certificate with a finding and has listing evidence of its own, a report or listing by a source or its own Spamhaus DROP address.
DomainSpoof reads public certificate logs and the feeds on Sources every hour. A hostname matches Swiss Post when a label carries the brand's name, by the rules on How it works. A lookalike spelling of an official domain matches too. A hostname with two kinds of finding is one row. Details shows the recorded checks, the source's claim and the check times available. How it works · Sources

