Security Scan Report: subnet.dokamacto.xyz

Site favicon
Submitted: Completed: publiccompleted
This website contacted 3 IPs in 1 country across 3 domains to perform 10 HTTP transactions. The main domain is dokamacto.xyz and was registered 1 month ago.

Submitted URL: https://subnet.dokamacto.xyz/ops-7f3k9m

AI Security Verdict

Confirmed Scam

Confidence: 92%

9
Risk Score

Password-gated fake 'Bittensor Subnet 41' validator console matching a roster-confirmed ClickFix/OverLord stealer recruitment kit (critical hunting-rule hit). Do not enter the password or run any copied command.

Risk Factors (6)
CRITICAL severity hunting-rule match for a known ClickFix/OverLord stealer kit (roster-anchored)
Analyst-vetted malicious kit family overlord-recruitment-refcode-clickfix-2026-11 identified on page
Password field with no accompanying username/email field (credential-harvesting pattern)
Impersonation of the Bittensor subnet/validator brand on a non-official domain
Domain only 34 days old and unranked in Cisco Umbrella
Kit chain leads to a clipboard-executed shell command installing an information stealer
Domain age information unavailable

Details

Page Title

Validator | Almanac

Scan Type

public

Domain Name Analysis

The domain 'subnet.dokamacto.xyz' uses the open generic top-level domain (.xyz); it also runs on subdomain 'subnet'. The registrable portion 'dokamacto' spans 9 characters containing 4 vowels alongside 5 consonants. Splitting it apart reveals 4 words: do, kama, c, to. Average segment length settles at two characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://subnet.dokamacto.xyz/ops-7f3k9m

Page Load Overview

3.56s
Total Load Time
445 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:102 chars
Detector Agreement:100%

Website Classification

Primary Category

news media journalism35% confidence
Type: static
Method: ml+structural+ocr_tiebreaker

All Detected Categories

news media journalism
35%
documentation technical
30%
corporate
25%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4208.84.100.64United States
AS22295Advin Services LLC
335.201.112.186Google · CDNKansas City, Missouri, United States
AS396982Google LLC
334.8.38.243Google · CDNKansas City, Missouri, United States
AS396982Google LLC
103--

Detected Technologies4

Nginxv1.28.3
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T18502760A28F140265313717D8E9FFC086C36610F8989ED497C9C82545FA5DFE8AB7EAC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:7LkaknhQeSgQCH1N5HEraqpXg0jfugWdO2XG0nkblskf2US13mPKkZBu6kWvF:7LRknhQrgL1LKDSKBu6BvF

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:8346:uZAICtAQCmsxAIJhIAAToIlFRNLADAtTEgAAIhAzgmCyLaoQQFaE5oViQa0IXyEECaAYiGhGmHIgGBQoIxbRVkAUwwAAAog3

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:e0c018ffdb180000
Perceptual Hash:cce273d9cc662199
Difference Hash:050030a432320c00
Wavelet Hash:e0e0ffffff180000
Color Hash:N/A

Other Hashes

Crop Resistant:050030a432320c00

Scan History

Scan history not available

Unable to load historical scan data