davismorganlabs[.]com

This domain is flagged as a high-risk generic phishing threat and remains active as of July 27, 2026. Analysis indicates that www.davismorganlabs.com resolves to IP address 119.18.54.28. VirusTotal data shows 6 out of 91 security vendors flag this domain as malicious, and it appears on 1 security blocklist. The domain is blocked by PhishDestroy.

The domain was registered on February 05, 2014, through GoDaddy.com, LLC, and its nameservers are ns47.domaincontrol.com and ns48.domaincontrol.com. The registration date is over 12 years old, which may indicate long-term ownership or a dormant domain repurposed for malicious activity. The exact content of the website has not been analyzed, so it is unknown whether it hosts a login page, a credential harvesting form, or other deceptive material. No brand target, page title, or scam type details are available in the current intelligence.

Defenders should treat this domain as a confirmed phishing threat due to the 6 vendor detections and blocklist presence. Recommended actions include blocking all traffic to the domain and IP 119.18.54.28 at the network level, adding the domain to email security filters to prevent links from being delivered, and monitoring for any related subdomains or infrastructure changes. Users who may have visited the site should be advised to change passwords and enable multi-factor authentication on any accounts that were entered. Continued monitoring is advised as the domain remains active and may evolve its attack methods.