mayocalc[.]pages[.]dev

PhishDestroy identifies mayocalc.pages.dev as an active calculator-themed phishing domain under investigation for credential theft. The site mimics legitimate calculator applications to deceive users into entering sensitive login information, posing as a fraudulent service under the guise of a utility tool.

This domain was flagged by 0 out of 95 VirusTotal security vendors at the time of analysis, indicating it has not yet been widely recognized as malicious. Registered through Cloudflare, Inc., it resolves to IP address 188.114.96.3 and utilizes a Let's Encrypt SSL certificate for deceptive legitimacy. As a Cloudflare Pages deployment, the domain’s infrastructure obscures underlying hosting details, complicating direct takedown efforts. While no blocklist counts or trust scores were available in this dataset, the combination of low detection rates and impersonation tactics suggests an emerging threat vector.

As this phishing site remains active and under investigation, users are strongly advised to avoid interacting with mayocalc.pages.dev or similar calculator-themed utilities that request login credentials. Verify the authenticity of any web-based calculator tool by checking the domain against official sources or using trusted, offline alternatives. Organizations should monitor network traffic for connections to 188.114.96.3 and update browser-based blocklists accordingly. Exercise heightened scrutiny for domains hosted on Cloudflare Pages, as their legitimate appearance can mask malicious intent.