multiplier-hypurr[.]com

The domain multiplier-hypurr.com is a phishing site engaged in brand impersonation targeting Google. It was designed to deceive users into believing they were interacting with a legitimate Google service, posing an elevated risk of credential theft or fraud. As of the latest verification, multiplier-hypurr.com has been taken offline, though its prior activity remains a concern for potential victims.

Technical analysis reveals that multiplier-hypurr.com was flagged by 1 of 95 VirusTotal security vendors, including SOCRadar, and appeared on 1 security blocklist (PhishDestroy). The domain was registered through Tucows Domains Inc. on August 22, 2025, and resolved to the IP address 188.114.96.3, hosted on Cloudflare's network (AS13335). The SSL certificate was issued by Google Trust Services / WE1, and the observed page title was 'WanderSphere Blog'. Google Safe Browsing did not flag the domain at the time of assessment, though Gridinsoft assigned it a trust score of 0/100. Technologies detected included Cloudflare and HTTP/3, with nameservers gemma.ns.cloudflare.com and jim.ns.cloudflare.com.

Users who may have interacted with multiplier-hypurr.com should immediately change any passwords associated with Google or other accounts accessed during the suspected phishing attempt. Enable two-factor authentication (2FA) on all critical services to mitigate further risk. Monitor accounts for unauthorized activity and report any suspected fraud to the impersonated brand (Google) and relevant authorities. Victims can also submit the domain to platforms like Google Safe Browsing, PhishTank, or their local cybercrime reporting center for further investigation.