lorkor.org
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of lorkor.org
lorkor.org appears to be an undeveloped or placeholder website rather than a fully launched service. The visible page shows a generic holding screen stating that the site is "waiting for content" and that DNS and server setup may have been completed correctly, which suggests the domain may currently be in a pre-launch or inactive state.
Based on the domain name, page title, and screenshot, there is no clear evidence of an active organization, product, or publisher operating a finished website on this domain at the time of the scan. The .org extension is commonly used by nonprofits, communities, or informational projects, but in this case the available content does not identify an operator or explain the site's intended purpose.
Safety Assessment for lorkor.org
Scan results indicate elevated risk signals at the time of this review. The domain was flagged by 9 out of 91 security engines, with multiple detections describing it as phishing-related, and several web-classification sources also categorized it as phishing or fraud. In addition, one threat database listed the domain for phishing and another returned a generic malicious classification, although other major threat databases were clean at the time of the scan.
At the same time, the live page content does not currently show an active phishing form or malware delivery page; instead, it displays a generic placeholder screen with no visible interactive content. The malware scan of the fetched page did not identify flagged files, links, or iframes. However, the combination of a very new domain, lack of established site content, no traffic ranking, and multi-engine phishing detections means the domain may still present meaningful risk even if the current page appears inactive.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The domain is using a valid Let's Encrypt SSL certificate expiring in September 2026 and is served by nginx/1.28.0 from an IP address geolocated to Jõhvi, Estonia. The hosting appears to be on a generic hosting service rather than clearly branded dedicated infrastructure. DNSSEC is not enabled, which is common but means DNS responses do not appear to have additional signing protection.
From a configuration standpoint, the site appears minimally deployed: the screenshot shows a default-style application placeholder page, and the metadata is sparse. While the TLS certificate is present and valid, that alone does not establish trustworthiness, especially when paired with limited content and adverse reputation signals.
Share your experience with this website. Was it safe? Did you encounter any issues?