milbiorb[.]com

PhishDestroy first observed milbiorb.com on Jun 22, 2026. The captured page title is “Agent Office”. Stored page analysis classifies the content as generic phishing. Current evidence score: 98/100 (critical).

Positive findings are stored from 2 sources: VirusTotal and Spamhaus DBL. VirusTotal recorded 21 detections among 91 engines: ADMINUSLabs, alphaMountain.ai, AlphaSOC, ArcSight Threat Intelligence, BitDefender, Certego, Chong Lua Dao, CyRadar, ESET, Forcepoint ThreatSeeker, Fortinet, G-Data, Gridinsoft, Kaspersky, Lionic, Lumu, Seclookup, SOCRadar, Sophos, Viettel Threat Intelligence, VIPRE on Jun 23, 2026 at 02:03 UTC. Spamhaus DBL: DBL_BOTNET on Jul 23, 2026 at 06:30 UTC. Non-positive and contextual checks: On Jun 22, 2026 at 22:10 UTC, AlienVault OTX listed 11 community pulse references (not vendor detections); Google Safe Browsing returned no flag. The external blocklist snapshot contained no matches on Aug 7, 2026 at 18:20 UTC. URLQuery recorded no positive detection; no observation timestamp was retained. URLScan completed without a malicious verdict (score 0) on Jul 29, 2026 at 03:02 UTC.

HTTP 502 was recorded on Aug 7, 2026 at 01:20 UTC; content was unavailable. Registration records for the domain list CNOBIN INFORMATION TECHNOLOGY LIMITED as the registrar and Mar 13, 2026 as the creation date. At collection time, the hostname resolved to 104.21.68.159 on AS13335 (CLOUDFLARENET - Cloudflare, Inc., US). The IP and ASN identify shared Cloudflare edge infrastructure; the origin server is not established by this address. DOM analysis on Jun 22, 2026 at 22:20 UTC returned 98/100. The evidence archive retains 2 visual captures from PhishDestroy and URLScan. TLS metadata lists Let's Encrypt / E7 as the certificate issuer with validity through Aug 9, 2026; checked Jun 23, 2026 at 01:00 UTC.

The content indicators and 2 positive source findings support the current generic phishing classification.