comptroller[.]paydasm[.]cc

This domain, comptroller.paydasm.cc, is identified as a fraudulent financial login portal designed to harvest user credentials under the guise of a legitimate financial or administrative service. Analysis indicates the infrastructure mimics institutional login pages, likely targeting employees or clients of financial entities to capture sensitive authentication details. The threat type is classified as generic_phishing, with no evidence of crypto-drainer functionality or direct malware delivery at this stage. Infrastructure analysis reveals the domain was registered on June 12, 2026, through Dominet (HK) Limited, a registrar frequently associated with high-risk domains. It resolves to the IP address 170.106.160.91 and is currently flagged by 12 out of 95 security vendors on VirusTotal. Additionally, the domain appears on two security blocklists and has been proactively blocked by at least two independent threat intelligence feeds. The domain is now offline, but residual risk remains for users who may have interacted with it prior to takedown. Users who visited comptroller.paydasm.cc or entered credentials on any page hosted under this domain should immediately revoke any active sessions tied to the compromised account. Reset passwords using a secure, unrelated device and enable multi-factor authentication where available. Monitor linked accounts for unauthorized transactions or configuration changes. If financial or corporate credentials were exposed, notify the relevant institution’s security team and report the incident to internal or regulatory authorities as required. Avoid reusing passwords from compromised accounts on other platforms.