Swiss Post

Postal & parcel Switzerlandpost.chRank 38 of the most impersonated
Cert findings · 24 h
0
Cert findings · 7 days
6
3 reported or listed · 2 on phishing hosts · 1 on Spamhaus DROP
Registered lookalikes
46
2 listed by a source or an address list
Official domains
45
verified from Swiss Post's own sites and records

Certificate findings for Swiss Post

Updated hourly · 2026-11-05 10:53 UTC

DomainSpoof matched these hostnames, from public certificate logs, to Swiss Post's name or to lookalike spellings of its official domains. Each was reported or listed by one of our sources, or resolved to an address on Spamhaus DROP or DomainSpoof's phishing-host list.

Published now · 9 findings, grouped by hostname

  1. fxeow.swisspostinfo.com DE · AS206834 · TEAMINTERNET-CA-AS Team Int…
    ReportedParking page · ParkingCrew (Team Internet)Under swisspostinfo.com, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 5 mo ago
    DetailsHide details for fxeow.swisspostinfo.com
    Hostname
    fxeow.swisspostinfo.com
    First seen
    2026-11-04 03:16 UTC
    First published
    2026-11-04 04:15 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 04:28 UTC
    Reported
    PhishDestroy, listing swisspostinfo.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-04 02:13 UTC to 2027-02-02 02:12 UTC
    Logged 2026-11-04 03:11 UTC in Google PlumbersArms2027h1, entry 601,739,872
    SHA-256 0bbe4953311c3179126c05095bab79fb691b8b35301167e59b83eaba61093102
    Public key SHA-256 4aa6139821e8d6e0f1834554e272fcf159cf939ed24880542e55212ffe224fea
    PhishDestroy
    Brand
    Swiss Post
    Addresses
    185.53.179.136 · Germany · AS206834 TEAMINTERNET-CA-AS Team Internet AG · ParkingCrew (Team Internet) (parking page)
    Parking page · ParkingCrew (Team Internet)
    ParkingCrew (Team Internet) (185.53.179.136): a parking service. It answers for names that are typically for sale or unused.
    Domain
    swisspostinfo.com
    Registered
    2026-06-02 · Hosting Concepts B.V. d/b/a Registrar.eu
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 18:19 UTC

    Suggest a correction

  2. ty8qf.swisspostinfo.com DE · AS206834 · TEAMINTERNET-CA-AS Team Int…
    ReportedParking page · ParkingCrew (Team Internet)Under swisspostinfo.com, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 5 mo ago
    DetailsHide details for ty8qf.swisspostinfo.com
    Hostname
    ty8qf.swisspostinfo.com
    First seen
    2026-11-03 18:00 UTC
    First published
    2026-11-03 18:16 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 18:20 UTC
    Reported
    PhishDestroy, listing swisspostinfo.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-03 17:00 UTC to 2027-02-01 17:00 UTC
    Logged 2026-11-03 17:59 UTC in DigiCert Wyvern2027h1, entry 391,614,418
    SHA-256 6e9d03ead706e9d8ebddfb6466a3ad1d6fe73ba1e9ac73baabeae225c295c1cd
    Public key SHA-256 4aa6139821e8d6e0f1834554e272fcf159cf939ed24880542e55212ffe224fea
    PhishDestroy
    Brand
    Swiss Post
    Addresses
    185.53.179.136 · Germany · AS206834 TEAMINTERNET-CA-AS Team Internet AG · ParkingCrew (Team Internet) (parking page)
    Parking page · ParkingCrew (Team Internet)
    ParkingCrew (Team Internet) (185.53.179.136): a parking service. It answers for names that are typically for sale or unused.
    Domain
    swisspostinfo.com
    Registered
    2026-06-02 · Hosting Concepts B.V. d/b/a Registrar.eu
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 18:19 UTC

    Suggest a correction

  3. postch.bond HK · AS152194 · CTG Server Limited
    Spamhaus DROPAddress listed by Spamhaus DROPMX absentSPF missingDMARC missingRegistered 3 mo ago
    DetailsHide details for postch.bond
    Hostname
    postch.bond
    First seen
    2026-10-31 22:57 UTC
    First published
    2026-10-31 23:50 UTC
    DNS
    Resolves · checked 2026-11-04 23:58 UTC
    Spamhaus DROP
    A brand lookalike resolving to an address on the Spamhaus Don’t Route Or Peer list. Address 134.122.190.28.
    1. Spamhaus DROP list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 134.122.190.28
    4. Latest DNS check
    Certificate
    Issued by Sectigo Public Server Authentication CA DV E36
    Valid 2026-10-31 00:00 UTC to 2027-01-17 13:20 UTC
    Logged 2026-10-31 22:55 UTC in DigiCert Sphinx2027h1, entry 325,219,755
    SHA-256 2641f0c8993b964047e383a031f79d839d02a0a4b7d8fcbd2f112e2a7d1e8e8f
    Public key SHA-256 49bb304ccb99e68ef23076aa35c2f8b42b0caf452eb352f714ed57a409eb0a31
    Brand
    Swiss Post
    Addresses
    134.122.190.28 · Hong Kong · AS152194 CTGSERVERLIMITED-AS-AP - CTG Server Limited
    Domain
    postch.bond
    Registered
    2026-08-10 · Spaceship, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 00:33 UTC

    Suggest a correction

  4. www.postch-ch.icu MD · AS200019 · AlexHost ALEXHOST S.R.L.2 addresses
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF missingDMARC missingRegistered 7 mo ago
    DetailsHide details for www.postch-ch.icu
    Hostname
    www.postch-ch.icu
    First seen
    2026-10-31 17:26 UTC
    First published
    2026-10-29 20:34 UTC
    DNS
    Resolves · checked 2026-11-04 20:44 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 91.199.133.247.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 91.199.133.247
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-10-31 16:25 UTC to 2027-01-29 16:25 UTC
    Logged 2026-10-31 17:24 UTC in IPng Networks Gouda2027h1, entry 279,688,227
    SHA-256 609f648bed67ebf97bc838c76f251d575545b1f385de78abce0e6ef997eea456
    Public key SHA-256 65dc3afe7c1d9fb34b8639ff929f3e5bba4f2806643c7fbfbbcf2f7e5807992c
    Brand
    Swiss Post
    Addresses
    91.199.133.247 · Moldova · AS200019 AlexHost ALEXHOST S.R.L.
    85.121.4.201 · Moldova · AS200019 AlexHost ALEXHOST S.R.L.
    Domain
    postch-ch.icu
    Registered
    2026-04-13 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Receives mail at mx.postch-ch.icu
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 01:50 UTC

    Suggest a correction

  5. postch-ch.icu MD · AS200019 · AlexHost ALEXHOST S.R.L.2 addresses
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF missingDMARC missingRegistered 7 mo ago
    DetailsHide details for postch-ch.icu
    Hostname
    postch-ch.icu
    First seen
    2026-10-31 17:26 UTC
    First published
    2026-10-29 20:34 UTC
    DNS
    Resolves · checked 2026-11-04 20:44 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 91.199.133.247.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 91.199.133.247
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-10-31 16:25 UTC to 2027-01-29 16:25 UTC
    Logged 2026-10-31 17:24 UTC in IPng Networks Gouda2027h1, entry 279,688,227
    SHA-256 609f648bed67ebf97bc838c76f251d575545b1f385de78abce0e6ef997eea456
    Public key SHA-256 65dc3afe7c1d9fb34b8639ff929f3e5bba4f2806643c7fbfbbcf2f7e5807992c
    Brand
    Swiss Post
    Addresses
    91.199.133.247 · Moldova · AS200019 AlexHost ALEXHOST S.R.L.
    85.121.4.201 · Moldova · AS200019 AlexHost ALEXHOST S.R.L.
    Domain
    postch-ch.icu
    Registered
    2026-04-13 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Receives mail at mx.postch-ch.icu
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 01:50 UTC

    Suggest a correction

  6. dkospx9.suisse-postch.com DE · AS206834 · TEAMINTERNET-CA-AS Team Int…
    ReportedParking page · ParkingCrew (Team Internet)Under suisse-postch.com, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 5 mo ago
    DetailsHide details for dkospx9.suisse-postch.com
    Hostname
    dkospx9.suisse-postch.com
    First seen
    2026-10-29 18:21 UTC
    First published
    2026-10-29 18:29 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 18:34 UTC
    Reported
    PhishDestroy, listing suisse-postch.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-10-29 17:17 UTC to 2027-01-27 17:17 UTC
    Logged 2026-10-29 18:16 UTC in Google PlumbersArms2027h1, entry 510,657,758
    SHA-256 242b63eb48d77707b4142eb5a6a2150d50b4f310e782a8a8712cbe4cfdba897a
    Public key SHA-256 51c7a5d8da73e6aff80345dac7abecbd30858b73a6ca30d84cc70e9e9410b657
    PhishDestroy
    Brand
    Swiss Post
    Addresses
    185.53.179.136 · Germany · AS206834 TEAMINTERNET-CA-AS Team Internet AG · ParkingCrew (Team Internet) (parking page)
    Parking page · ParkingCrew (Team Internet)
    ParkingCrew (Team Internet) (185.53.179.136): a parking service. It answers for names that are typically for sale or unused.
    Domain
    suisse-postch.com
    Registered
    2026-05-27 · Hosting Concepts B.V. d/b/a Registrar.eu
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 03:07 UTC

    Suggest a correction

  7. login.suisse-postch.com DE · AS206834 · TEAMINTERNET-CA-AS Team Int…
    ReportedParking page · ParkingCrew (Team Internet)Under suisse-postch.com, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 5 mo ago
    DetailsHide details for login.suisse-postch.com
    Hostname
    login.suisse-postch.com
    First seen
    2026-10-28 23:51 UTC
    First published
    2026-10-29 00:30 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 00:41 UTC
    Reported
    PhishDestroy, listing suisse-postch.com and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-10-28 22:50 UTC to 2027-01-26 22:50 UTC
    Logged 2026-10-28 23:49 UTC in Geomys Tuscolo2027h1, entry 388,132,669
    SHA-256 cb4f454b82ec4ddfdc2ab5e51252a8eccb2efbd9269805bcf309b5c85193ff94
    Public key SHA-256 51c7a5d8da73e6aff80345dac7abecbd30858b73a6ca30d84cc70e9e9410b657
    PhishDestroy
    Brand
    Swiss Post
    Addresses
    185.53.179.136 · Germany · AS206834 TEAMINTERNET-CA-AS Team Internet AG · ParkingCrew (Team Internet) (parking page)
    Parking page · ParkingCrew (Team Internet)
    ParkingCrew (Team Internet) (185.53.179.136): a parking service. It answers for names that are typically for sale or unused.
    Domain
    suisse-postch.com
    Registered
    2026-05-27 · Hosting Concepts B.V. d/b/a Registrar.eu
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 03:07 UTC

    Suggest a correction

  8. swiss-post-ch.com SC · AS403005 · Blatant
    Phishing hostSpamhaus DROPAddress hosted confirmed phishing in the last 48 h · Address listed by Spamhaus DROPMX absentSPF missingDMARC missingRegistered 14 d ago
    DetailsHide details for swiss-post-ch.com
    Hostname
    swiss-post-ch.com
    First seen
    2026-10-27 23:42 UTC
    DNS
    Not resolving since 2026-11-02 · checked 2026-11-05 08:52 UTC
    Checks
    Overdue since 2026-11-02 08:51 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 64.89.161.67.
    1. Resolved to 64.89.161.67
    2. Phishing-host list fetched with the address
    Spamhaus DROP
    A brand lookalike resolving to an address on the Spamhaus Don’t Route Or Peer list. Address 64.89.161.67.
    1. Spamhaus DROP list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 64.89.161.67
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-10-27 22:38 UTC to 2027-01-25 22:38 UTC
    Logged 2026-10-27 23:36 UTC in Let's Encrypt Willow2027h1, entry 804,973,780
    SHA-256 83d642c44e77495cdcdb2fe8051e7b12c33695e4a1ce32cb0cedb9c6811f9780
    Public key SHA-256 ec7043b0e0d104a9ca173d6e1431d585ab17b8ba5e3562b4edac7792cee2ba45
    Brand
    Swiss Post
    Addresses
    64.89.161.67 · Seychelles · AS403005 BLATANTHOST - Blatant
    Domain
    swiss-post-ch.com
    Registered
    2026-10-22 · Gransy, s.r.o.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:35 UTC

    Suggest a correction

How certificate findings are selected

Reported: PhishTank or PhishDestroy reports the hostname as phishing. Listed: CERT Polska, MetaMask, USOM, MODA, NPA 165, JPCERT/CC, the AMF, the FSMA or BaFin lists it, in the source's own category. Phishing host: the name resolves to an address on DomainSpoof's phishing-host list, the addresses that hosted confirmed phishing in the last 48 hours. Spamhaus DROP: it resolves to an address on the Spamhaus DROP list. Same certificate: it shares a certificate with a finding and has listing evidence of its own, a report or listing by a source or its own Spamhaus DROP address.

DomainSpoof reads public certificate logs and the feeds on Sources every hour. A hostname matches Swiss Post when a label carries the brand's name, by the rules on How it works. A lookalike spelling of an official domain matches too. A hostname with two kinds of finding is one row. Details shows the recorded checks, the source's claim and the check times available. How it works · Sources

More brands in Postal & parcel

All brands →