other · CH

Swiss Post

Die Schweizerische Post AG

Swiss postal operator (incl. PostFinance); parcel-delivery lures.

Primary official domain
post.ch
Reviewed official domains
3 (directory review; organization has not verified)
Directory source
DomainSpoof directory · Suggest a correction
Matching domains, 30 days
5
registrable domains containing the brand; source date or last feed observation
First source-reported, 30 days
0
domains first source-reported within 30 days
First observed, 30 days
8
domains first observed by DomainSpoof in feeds
Email policy (primary domain)
DMARC reject
SPF -all · 8/10 lookups · Mail: Not checked · checked 2026-10-18 · published policy

What we watch for

Hostnames in phishing feeds and certificate logs are matched on these brand tokens; feed target labels are matched on the aliases. Generated spellings (typos, lure words, look-alike characters, other top-level domains) are derived from the official domains and tokens and checked against feeds, certificate logs and DNS.

Brand tokens
postfinanceswisspost
Label aliases
PostFinance · Swiss Post
Official domains
post.ch · postfinance.ch · swisspost.ch (all)
Generated spellings
323 tracked · 58 observed somewhere · 265 not observed (all)

Certificate domains matching this brand

Names identified in certificate logs that match this company or brand. A brand match does not indicate bad intent or malicious activity.

Matching domain groups, 30 days
7
distinct registrable domains with a matching certificate name, by latest CT log time; not attacks
Reviewed official
2
groups on this organization's reviewed official domains, 30 days
Not assessed
5
groups with the brand in the name and no review; no judgement implied
Latest CT observation
2026-10-19 07:34 UTC
log timestamp, not issuance or collection time
Matching domain / nameMatched brand / domainMatch typeFirst CT observationLatest CT observationDistinct certificatesRelationshipSource-reported abuseDetails
post.ch18 names
post.chOfficial domain2026-10-19 05:00 UTC2026-10-19 07:34 UTC36Reviewed officialNo report in sample coverage
adoitint.post.ch
post.chOfficial domain2026-10-19 07:34 UTC2026-10-19 07:34 UTC2Issuer SwissSign RSA TLS OV ICA 2022 - 1
pmf-pes.post.ch
post.chOfficial domain2026-10-19 07:29 UTC2026-10-19 07:29 UTC2Issuer SwissSign RSA TLS OV ICA 2022 - 1
mys-intern.post.ch
post.chOfficial domain2026-10-19 07:26 UTC2026-10-19 07:26 UTC2Issuer SwissSign RSA TLS OV ICA 2022 - 1
gitit.post.ch
post.chOfficial domain2026-10-19 07:23 UTC2026-10-19 07:24 UTC2Issuer SwissSign RSA TLS OV ICA 2022 - 1
dgs.post.ch
post.chOfficial domain2026-10-19 07:22 UTC2026-10-19 07:22 UTC2Issuer SwissSign RSA TLS OV ICA 2022 - 1
13 more names in this group (most recent shown)
14578455-swisspost-centerlogistics-secure.pages.dev1 name · includes wildcard names
swisspostBrand token in name2026-10-19 07:27 UTC2026-10-19 07:27 UTC1Not assessedNo report in sample coverage
14578455-swisspost-centerlogistics-secure.pages.dev
swisspostBrand token in name2026-10-19 07:27 UTC2026-10-19 07:27 UTC1Issuer WE1
*.14578455-swisspost-centerlogistics-secure.pages.devWildcard certificate name: a pattern, not an observed live host
swisspostBrand token in name2026-10-19 07:27 UTC2026-10-19 07:27 UTC1Issuer WE1
checksum-pos.ch4 names
postfinanceBrand token in name2026-10-19 07:11 UTC2026-10-19 07:11 UTC2Not assessedNo report in sample coverage
ipv6.postfinance-ag-lausanne.checksum-pos.ch
postfinanceBrand token in name2026-10-19 07:11 UTC2026-10-19 07:11 UTC2Issuer YR1
mail.postfinance-ag-lausanne.checksum-pos.ch
postfinanceBrand token in name2026-10-19 07:11 UTC2026-10-19 07:11 UTC2Issuer YR1
postfinance-ag-lausanne.checksum-pos.ch
postfinanceBrand token in name2026-10-19 07:11 UTC2026-10-19 07:11 UTC2Issuer YR1
www.postfinance-ag-lausanne.checksum-pos.ch
postfinanceBrand token in name2026-10-19 07:11 UTC2026-10-19 07:11 UTC2Issuer YR1
ost.ch3 names
ost.chGenerated spelling2026-10-19 05:30 UTC2026-10-19 07:02 UTC6Not assessedNo report in sample coverage
codev.esa.ost.ch
ost.chGenerated spelling2026-10-19 07:02 UTC2026-10-19 07:02 UTC2Issuer YE2
moodle.test.ost.ch
ost.chGenerated spelling2026-10-19 06:47 UTC2026-10-19 06:47 UTC2Issuer YR2
dwh.test.ost.ch
ost.chGenerated spelling2026-10-19 05:30 UTC2026-10-19 05:30 UTC2Issuer YR1
podt.ch1 name
podt.chGenerated spelling2026-10-19 06:14 UTC2026-10-19 06:14 UTC2Not assessedNo report in sample coverage
cpanel.podt.ch
podt.chGenerated spelling2026-10-19 06:14 UTC2026-10-19 06:14 UTC2Issuer YE1
stratoserver.net1 name
postfinanceBrand token in name2026-10-19 05:58 UTC2026-10-19 05:58 UTC2Not assessedNo report in sample coverage
wwwpostfinance.cardst.git.git.git.h2977615.stratoserver.net
postfinanceBrand token in name2026-10-19 05:58 UTC2026-10-19 05:58 UTC2Issuer YE2
postfinance.ch2 names
postfinance.chOfficial domain2026-10-19 05:44 UTC2026-10-19 05:48 UTC4Reviewed officialNo report in sample coverage
sap.postfinance.ch
postfinance.chOfficial domain2026-10-19 05:46 UTC2026-10-19 05:48 UTC2Issuer GlobalSign GCC R46 OV TLS CA 2025
events.postfinance.ch
postfinance.chOfficial domain2026-10-19 05:44 UTC2026-10-19 05:46 UTC2Issuer GlobalSign GCC R46 OV TLS CA 2025

Collected from public certificate-transparency logs since 2026-10-18; 34,137,216 log entries checked so far. 80 logs are read continuously by our CT resolver from the point it started following them; earlier entries are not covered. Names on an organization's official domains are recorded by the resolver for at most 100 names per registrable domain per day, so official-domain name and certificate counts are lower bounds. Times are CT log timestamps, which differ from certificate validity dates. Certificate counts include precertificates and final certificates as separate artifacts. The "Source-reported abuse" badge appears only when an independent source reported that exact name for this organization; a certificate name match never creates it, and "No report in sample coverage" is not a safety verdict. How CT works