cl-academy-hibiki-win[.]pages[.]dev

The domain cl-academy-hibiki-win.pages.dev is a generic phishing site that was taken offline after being flagged as a credential phishing threat. It impersonates no specific brand and does not use a drainer kit, but it was designed to steal login credentials from visitors. The site is currently inaccessible, returning an HTTP 403 status, and is listed on three security blocklists.

Technical analysis shows that cl-academy-hibiki-win.pages.dev has zero detections from 95 VirusTotal vendors and is not flagged by Google Safe Browsing, but it appears on blocklists from PhishDestroy, MetaMask, and SEAL. The domain was registered on March 22, 2026, through Cloudflare, Inc., and resolves to IP address 172.66.44.166, located in CA (Cloudflare, Inc.). Its SSL certificate was issued by Let's Encrypt / E7, and the page title observed was 'HIBIKIWIN: Referensi Situs Game Online Resmi Dan Terpercaya Dengan Fitur Layanan Terbaik'. Technologies detected include AMP, Lightbox, HSTS, Cloudflare, and HTTP/3, and the Gridinsoft trust score is 0 out of 100.

If you entered credentials on cl-academy-hibiki-win.pages.dev, immediately change those passwords on the legitimate sites and enable two-factor authentication on all accounts. Monitor your accounts for unauthorized access or fraudulent activity. Report the domain to hosting provider Cloudflare and to security blocklists such as PhishDestroy and MetaMask to help protect others.