ton-keeper.org
Category: Phishing And Other Frauds
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of ton-keeper.org
ton-keeper.org appears to present itself as a cryptocurrency wallet website focused on the TON blockchain. The homepage branding, page title, and visible text describe a self-custody wallet for managing TON-based assets such as Toncoin, Jettons, NFTs, and DeFi-related tools across multiple platforms.
Based on the page structure and metadata, the site appears to be built on WordPress and includes standard marketing sections such as Services, FAQ, Resources, About, and Contact. The domain name closely matches the name of the Tonkeeper wallet brand, suggesting the site may be attempting to represent or promote that product or a related service.
The available scan data does not clearly identify the operator, and the domain is relatively new. In the absence of verified ownership details on the provided data, the entity behind the website cannot be confirmed from this scan alone.
Safety Assessment for ton-keeper.org
Several risk indicators were present at the time of this scan. The domain was flagged by 3 out of 91 security engines, with multiple detections specifically classifying it as phishing or suspicious. In addition, one web-classification source categorized the site under phishing and other frauds, while another categorized it under financial services. The domain is also very new, at 52 days old, and it is not ranked in major traffic listings, which may increase uncertainty when combined with phishing-related detections.
At the same time, the malware scan did not identify flagged files, and major threat-database checks listed in the scan were clean at the time of review. However, clean file scanning does not necessarily rule out credential-harvesting or wallet-related social-engineering risks. The site also appears to use branding associated with a known TON wallet name, and the domain closely resembles that branding, which may indicate a look-alike setup rather than an established official web presence.
Based on these findings, this website may pose potential risks to visitors, particularly in contexts involving wallet access, seed phrases, account credentials, or cryptocurrency transactions.
Technical Description
The site was reachable over HTTPS with a valid TLS certificate issued by Sectigo Limited, expiring on 2026-11-29. It is hosted on infrastructure associated with Namecheap in Los Angeles, uses a LiteSpeed web server, and points to Namecheap-hosted nameservers. DNSSEC appears to be unsigned, which is not uncommon but does mean DNS responses do not benefit from that additional integrity layer.
From the page artifacts provided, the site appears to be running on WordPress and includes multiple embedded WordPress-style iframe endpoints, including a default-looking "hello world" path. No malicious files were flagged in the file scan, but the combination of a newly registered domain, phishing-related engine detections, and brand-resembling wallet content may warrant caution from a technical trust perspective.
Share your experience with this website. Was it safe? Did you encounter any issues?