comptroller[.]payflka[.]cc

Analysis of the domain comptroller.payflka.cc indicates it is an active phishing infrastructure targeting users of Florida state payroll or financial systems. Registered on June 12, 2026, through Dominet (HK) Limited, the domain currently resolves to the IP address 170.106.160.91. As of July 29, 2026, the domain is flagged by 13 of 91 security vendors on VirusTotal and appears on one security blocklist, suggesting elevated risk. The naming convention 'payflka' closely resembles 'PayFLO,' a known Florida state payroll platform, though no direct confirmation of the targeted brand has been independently verified through page content analysis.

The domain's creation date and registration details align with typical phishing campaign timelines, where recently registered domains are leveraged for short-term malicious activity. The use of a Hong Kong-based registrar may be intended to obscure ownership or complicate takedown efforts. While the exact content of the site remains unanalyzed, the combination of a state payroll-related subdomain, detection by multiple security vendors, and presence on a blocklist supports its classification as a phishing threat.

Defenders should treat this domain as high-risk and prioritize blocking or monitoring access to it. Network security teams are advised to inspect logs for connections to 170.106.160.91 and review any associated SSL certificates for further indicators of compromise. If the domain is confirmed to impersonate Florida state systems, relevant authorities should be notified for potential takedown coordination.