hypermetrics[.]xyz

Analysis of hypermetrics.xyz indicates a credential-phishing domain registered on February 21, 2026, through OVH. The domain resolved to 216.239.34.21, an IP address within AS15169 (Google LLC) located in the US. At the time of assessment on July 24, 2026, the domain returned an HTTP 404 status and was offline, though it had previously displayed the page title 'Welcome to Hypermetrics - Hypermetrics.' The site was hosted using technologies including Apple iCloud Mail, Google Cloud, and Google Cloud Trace. The domain appears on one security blocklist and is flagged by 6 of 93 security vendors on VirusTotal as malicious.

It was blocked by PhishDestroy, and Gridinsoft assigned a trust score of 0/100. The SSL certificate was issued by Let's Encrypt (R13), and the domain used nameservers ns16.ovh.net and dns16.ovh.net. No specific phishing kit or targeted brand was identified in the available data, and the exact content of the phishing page remains unconfirmed. Defenders should treat this domain as a confirmed malicious indicator.

The combination of a recent registration, low trust scores, and detection by multiple vendors supports its classification as a phishing threat. Network-level blocking is recommended, and any prior connections to this domain should be investigated for credential theft or follow-on compromise. Further analysis of historical content may clarify the intended target or campaign.