popr.ink
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of popr.ink
popr.ink appears to be a very recently registered domain using the .ink extension and fronted by a content-delivery and protection service. Based on the limited scan data provided, the site does not present a clearly established business, publisher, or organization identity, and there is no strong category metadata indicating a well-known service type such as retail, finance, or media.
The domain is relatively new and uses Cloudflare-hosted infrastructure, which may be used by both legitimate and abusive websites. Because the available information is sparse and the scan references only a challenge-platform URL rather than rich page content, the website appears to have limited publicly identifiable context at the time of this scan.
Safety Assessment for popr.ink
Multiple security signals indicate elevated risk at the time of this scan. The domain was flagged by 15 out of 91 security engines, with many of those detections classifying it as phishing or malicious. In addition, one blacklist-style provider listed the domain, although major threat-database checks shown here did not detect it. The malware scan itself reported no flagged files, but it did associate the domain and one internal challenge URL with a generic malicious label, which adds some caution even though such labels can be less specific than named threat families.
Context also matters here: the domain is very new, has limited reputation history, and does not appear to have an established identity based on the available data. While the DNS-based blacklist checks shown were clean, the broader multi-engine consensus is a stronger signal in this case than the absence of a DNSBL listing. Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site uses a valid SSL/TLS certificate issued by a mainstream certificate authority, with expiry listed as 2026-09-09. It is served through Cloudflare infrastructure on IP address 188.114.97.2, with Cloudflare nameservers and hosting geolocated here to Toronto, Canada. This setup can improve availability and conceal origin infrastructure, but it does not by itself indicate legitimacy or abuse.
DNSSEC appears to be unsigned, which means DNS responses may not benefit from DNSSEC validation. No obvious TLS misconfiguration is shown in the provided data, but the domain's young age, limited reputation, and substantial multi-engine phishing detections are the primary technical concerns at the time of this scan.
Share your experience with this website. Was it safe? Did you encounter any issues?