tonko.app
Category: Finance & Banking
- Don't sign in or pay here. Close it. If you typed a password, change it where you normally use it.
- Already visited? Check your device. A free scan shows whether anything was installed.
- Stop the next one. Combo Cleaner's web protection blocks phishing and scam sites before they load.
Combo Cleaner is PCrisk's own anti-malware tool, owned by RCS LT. Free to scan; removing what it finds needs a licence (7-day free trial).
Description of tonko.app
tonko.app appears to be the website for TONKO, a family-focused mobile app that teaches children basic money habits through pocket money, chores, savings goals, and parent-approved actions. Based on the page title, meta description, and homepage screenshot, the service is presented as an educational finance tool for families rather than a banking platform or direct payment processor.
The site promotes a single app experience with sections such as how it works, what kids learn, safety, and questions, alongside a download link and references to Android availability. The branding and content suggest it may be operated by the TONKO app team or company behind the product, with infrastructure indicating a modern web deployment on a cloud hosting platform.
Safety Assessment for tonko.app
The available scan data shows mixed but limited caution signals at the time of this scan. One security engine flagged the domain, while the malware scan reported no flagged files and marked the overall threat level as clean. A separate heuristic scanner labeled the domain and many internal asset URLs as generic suspicious objects, but those detections appear to be broad pattern-based findings affecting site resources such as JavaScript bundles and image paths rather than confirmed malware payloads.
Blacklist and threat-database checks were largely clean at the time of this scan, including major phishing and malware-oriented sources, although one generic blacklist entry was present with a heuristic-style label. The site is also very new, which modestly increases uncertainty because newly registered domains have had less time to build reputation. At the same time, the visible content presents a coherent product website for a children's pocket-money app, with no obvious phishing prompts, fake brand imitation, or malware-delivery behavior visible from the provided page.
Based on these findings, the website appears to carry a low-to-moderate level of risk mainly due to its recent registration and limited isolated detections rather than strong evidence of active malicious behavior. Based on available scan data, no significant threats were detected at the time of this scan, but some caution may still be warranted.
Technical Description
The domain uses a valid Let's Encrypt SSL certificate, which indicates HTTPS was configured at the time of testing. It is hosted on Vercel infrastructure, uses Vercel nameservers, and resolves to an IP address associated with that hosting provider. The web stack and URL structure suggest a modern JavaScript framework deployment, likely with static assets and image optimization endpoints.
DNSSEC appears to be unsigned, which is common but means DNS responses do not benefit from that additional authenticity layer. No major server-side security issue is evident from the provided data, though the domain's young age and a small number of heuristic detections are minor technical trust considerations.
Share your experience with this website. Was it safe? Did you encounter any issues?