ton-keeper.pages.dev
Category: Information Technology, Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of ton-keeper.pages.dev
This website appears to present itself as a promotional landing page for Tonkeeper, a cryptocurrency wallet associated with The Open Network (TON). The page title and visible content emphasize an "Airdrop" offer and encourage visitors to connect a wallet to claim tokens, which suggests the site is designed to attract cryptocurrency users interested in wallet services, token claims, or promotional distributions.
The domain itself is hosted on a pages.dev subdomain rather than the primary tonkeeper.com domain referenced in the page resources. Based on the branding, wording, and category data, the site appears to be positioned as a technology or cryptocurrency-related page, but it may also be attempting to imitate or borrow trust from the Tonkeeper brand rather than operating as an official brand-owned property.
Safety Assessment for ton-keeper.pages.dev
Several scan signals indicate caution. At the time of this scan, 4 out of 91 security engines flagged the page, with multiple detections describing it as phishing-related. In addition, the domain closely resembles the Tonkeeper brand while operating from a third-party hosting subdomain, and the page prominently asks users to connect a cryptocurrency wallet in order to claim an airdrop. That combination may be consistent with wallet-draining or credential-harvesting tactics often seen in crypto-themed fraud.
At the same time, some supporting checks were clean at the time of this scan: the malware scan did not identify flagged files, and major threat databases and blacklist checks did not report the domain. However, clean blacklist results do not outweigh multiple phishing-oriented detections and the high-risk behavioral pattern of requesting wallet connection for an airdrop claim.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site is served through Cloudflare infrastructure on IP address 188.114.97.0 and presents a valid SSL/TLS certificate issued by Google Trust Services, expiring in September 2026. The domain has been registered for several years, uses Cloudflare nameservers, and its DNSSEC status appears to be unsigned.
From a technical standpoint, the page is lightweight and the scan found only a small number of files with no flagged malware artifacts. However, the use of a hosted subdomain rather than an apparent primary brand domain, combined with phishing-related detections and wallet-connection prompts, may be a more meaningful concern than the basic transport security configuration.
Share your experience with this website. Was it safe? Did you encounter any issues?