ymbvall[.]com

ymbvall.com entered the PhishDestroy evidence set on Jul 15, 2026. The stored content classification is credential phishing. The assembled evidence scores 76/100 (high).

Two independent sources are positive: VirusTotal and Spamhaus DBL. VirusTotal recorded 2 detections among 91 engines: Fortinet, LevelBlue on Jul 15, 2026 at 01:51 UTC. Spamhaus DBL: DBL_SPAM on Jul 15, 2026 at 02:30 UTC. The evidence is not unanimous. On Jul 15, 2026 at 01:52 UTC, AlienVault OTX listed 2 community pulse references (not vendor detections); Google Safe Browsing returned no flag. The external blocklist snapshot contained no matches on Aug 7, 2026 at 18:20 UTC. URLQuery recorded no positive detection on Jul 15, 2026 at 01:43 UTC. URLScan completed without a malicious verdict (score 0) on Jul 15, 2026 at 01:21 UTC.

HTTP 502 was recorded on Aug 7, 2026 at 01:32 UTC; content was unavailable. Registration records for the domain list Hello Internet Corp as the registrar and Mar 10, 2026 as the creation date. At collection time, the hostname resolved to 91.92.243.12 on AS202412 (Omegatech LTD). The recorded endpoint location is New York, US. DOM analysis completed on Jul 15, 2026 at 02:20 UTC; stored DOM score 76/100. The evidence archive retains 3 visual captures from PhishDestroy, URLScan, and URLQuery. IoC extraction completed on Jul 29, 2026 at 02:48 UTC; stored 0 format-validated wallet addresses and 0 Telegram indicators. TLS metadata lists Let's Encrypt as the certificate issuer; checked Jul 18, 2026 at 22:00 UTC.

No page title was retained; the visual captures, not a title string, preserve the landing-page appearance. No target brand has been confirmed from stored page content; hostname wording alone is not treated as brand evidence. Taken together, the page content and independent findings support classifying this hostname as credential phishing.