# mayocalc.pages.dev — SUSPICIOUS

> mayocalc.pages.dev impersonates a calculator app to steal credentials. Flagged by 0/95 VirusTotal vendors, this Cloudflare-hosted domain resolves to IP 188.114.

## Summary
PhishDestroy identifies mayocalc.pages.dev as an active calculator-themed phishing domain under investigation for credential theft. The site mimics legitimate calculator applications to deceive users into entering sensitive login information, posing as a fraudulent service under the guise of a utility tool.  

This domain was flagged by 0 out of 95 VirusTotal security vendors at the time of analysis, indicating it has not yet been widely recognized as malicious. Registered through Cloudflare, Inc., it resolves to IP address 188.114.96.3 and utilizes a Let's Encrypt SSL certificate for deceptive legitimacy. As a Cloudflare Pages deployment, the domain’s infrastructure obscures underlying hosting details, complicating direct takedown efforts. While no blocklist counts or trust scores were available in this dataset, the combination of low detection rates and impersonation tactics suggests an emerging threat vector.  

As this phishing site remains active and under investigation, users are strongly advised to avoid interacting with mayocalc.pages.dev or similar calculator-themed utilities that request login credentials. Verify the authenticity of any web-based calculator tool by checking the domain against official sources or using trusted, offline alternatives. Organizations should monitor network traffic for connections to 188.114.96.3 and update browser-based blocklists accordingly. Exercise heightened scrutiny for domains hosted on Cloudflare Pages, as their legitimate appearance can mask malicious intent.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/f8269ff7-3003-435d-ab63-9d77284753a4
- PhishDestroy: https://phishdestroy.io/domain/mayocalc.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/mayocalc.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/mayocalc.pages.dev/
Last updated: 2026-03-28