metrics for subdomains with fake login on medieval