# gokabuto.pro — SUSPICIOUS

> Site gokabuto.pro hosts a crypto drainer posing as an airdrop scam—0/95 detections and registered November 30, 2025. Stop interactions immediately.

## Summary
PhishDestroy identifies gokabuto.pro as an active airdrop scam impersonating the legitimate Kabuto token platform to trick users into connecting crypto wallets. The page title “Kabuto | Airdrop” directly mirrors the brand it abuses, attempting to lend false credibility. Once a wallet is linked, the drainer silently siphons tokens and NFTs, often draining entire balances within seconds.  This domain was flagged by multiple sources and shows clear indicators of malicious intent. VirusTotal shows 0 detections out of 95 engines, yet SEAL and MetaMask already block the site, confirming its harmful nature. The domain was registered on November 30, 2025, through WebNic.cc, a registrar known for high-risk bulk registrations. The site also uses a Google Trust Services SSL certificate to appear legitimate and resolves to IP 188.114.96.3, hosted within Cloudflare’s network.  If you visited gokabuto.pro, do not connect your wallet or enter any details. Revoke any wallet connections immediately using tools like revoke.cash. Clear browser data, run a malware scan, and update your wallet software. Report the domain to your antivirus vendor, browser, and social platforms to help block it. Stay safe by only using official project sites and verified links.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)
- Target brand: Airdrop Scam
- Page title: Kabuto | Airdrop

## Domain Intelligence
- Registered: 2025-11-30 17:01:11
- Registrar: Web Commerce Communications Limited dba WebNic.cc
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 2 hits
  Lists: ["SEAL", "MetaMask"]

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/e41c723e-bb79-47e4-a883-b92aab7504a4
- PhishDestroy: https://phishdestroy.io/domain/gokabuto.pro/
- LLM endpoint: https://phishdestroy.io/domain/gokabuto.pro/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/gokabuto.pro/
Last updated: 2026-03-29