OK, I did some research trying to find out which is the official and "safe" version of Popcorn Time as there are a few (or at least 2 major ones).
getpopcorntime.is is the first result on Google when you search for "Popcorn Time" (as of now). It has about 2 times the traffic as well. I guess due to being the first search result.
However, popcorntime.sh is supposed to be the official version according to [the reddit group](reddit.com/r/PopCornTime) and the official github repo.
I'm giving 4 stars due to the confusion and the potential scam around it.