Verdict
luminexclient.com shows high-risk / scam indicators.
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
| What this site appears to be | A product page for Luminex Client, a free Minecraft PvP mod (version 1.21.11) with feature lists, installation steps using Fabric Loader/API, screenshots, and FAQ. The site offers a direct download of the mod jar. |
|---|
Evidence status and limitations
Evidence completeness: UNKNOWN
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 3 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0 reportsAbuseIPDB; shared hosting inflates this count | Noted |
| Domain age | 6 months oldMost scam domains are under a year old | Watch |
| Web archive | Never archivedNo public history of this site | Watch |
| Certificate | Encrypted connectionIssued by YE2 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: less than 1 year (registration continuity).
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
- The operator behind the site could not be independently connected to a real-world brand or person.
Full analysis
Security Alert
Fortinet, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.
A downloadable software website presenting “Luminex Client” as a free Minecraft PvP modification for version 1.21.11. It offers a direct mod-JAR download, installation instructions for Fabric Loader and Fabric API, screenshots, FAQs, and a feature set aimed at combat-focused gameplay.
Scam/Impersonation Risk
The site carries a critical interaction risk because external reputation checks recorded a confirmed blacklist status, including multiple malicious detections and additional suspicious detections. This is a direct contradiction to treating the download as trusted, even though the page itself contains no identified login form, payment function, or explicit brand-impersonation indicator. The site’s young registration history and unverified operator identity further limit confidence in the provenance of software offered for local installation. No conflicting legal-entity names or confirmed brand impersonation were observed.
- The homepage is a direct-download software page offering “Luminex Client 1.21.11” as a mod JAR for local installation.
- External reputation checks recorded 3 malicious detections and 2 suspicious detections, with a confirmed blacklist result.
- The domain was registered in 2026 (0.52 years old), according to the domain-registration record.
Regulatory Verification Notes
The site presents a technical product rather than a regulated financial service, and no financial or licensing claim is evident in the supplied page content. However, the available material does not clearly identify a corporate operator, publisher, or accountable legal entity, leaving the real-world identity unverified. The page also does not state a software licensing basis, publisher verification method, or formal support and accountability structure. A valid transport certificate confirms encrypted delivery, but it does not establish that the downloadable software is authentic or safe. The third-party broker-reputation dataset produced no matching result; that absence is contextual only and does not offset the confirmed external reputation warnings.
- The site’s hosting record identifies AS203273 operated by NetCraftersOU - NetCrafters OU, EE.
- The site uses a DV TLS certificate issued by YE2, valid to 2026-12-16T17:50:56+00:00.
- The homepage identifies the product and installation dependencies but does not provide a clear corporate publisher identity, licensing statement, or registration disclosure.
What to Verify Next
Before any execution, an organization should obtain the publisher’s real-world identity through an independent channel, compare the downloaded file against a publisher-controlled cryptographic hash or signature, and analyze the mod in a controlled environment without access to production credentials or sensitive systems. Any claimed relationship to Minecraft, Fabric, or other named software should be checked through the respective official project channels rather than relying on links or statements on the download page. Licensing and publisher details should be confirmed before organizational distribution.
- The homepage instructs users to install Fabric Loader and Fabric API and then place the downloaded client into a Minecraft installation.
- The product page advertises modules including Aim Assist, Trigger Bot, Auto Crystal, Freecam, Player ESP, and Self Destruct, making independent file analysis particularly relevant before execution.
- The page provides a direct one-click download but no supplied evidence of publisher signing, hash publication, or app-store verification.
Summary Verdict
The website should be treated as a critical-trust, sensitive-interaction-risk destination. Its apparent software-download purpose and technically coherent presentation do not overcome the confirmed external reputation contradiction and the lack of independently verified operator identity. Passive inspection may be possible, but the site is not suitable for trusted software acquisition or sensitive interaction.
Infrastructure Integrity
The site is protected by Cloudflare CDN/WAF infrastructure, and the analysis observed only a CDN edge address rather than an independently verifiable origin server. This provides a degree of exposure reduction for the origin but is only a mitigating infrastructure feature and does not validate the site or its downloadable content.
Closing Assessment
Organizational handling should remain limited to controlled, read-only investigation until the publisher, file integrity, and software behavior have been independently validated.
Written analysis generated 2026-09-18 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
2 findings contributed to this verdict, raised by registration and ownership, analysis engine, external reputation.
01 Governance Risk
- The public registration record for this domain is incomplete.Registration and ownership
rule:KF_WHOIS_INCOMPLETE
02 Sensitive Interaction Risk
- The analysis matched a pattern TrustSniffer treats as a direct threat to a visitor.Analysis engine
signal:direct_threat - An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it.External reputation
rule:EXT_BLACKLIST_CRITICAL
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 30/100 |
| Identity verification confidence | 50% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of luminexclient.com.
- The request stayed on luminexclient.com. It was not redirected to another domain. Clear
- Registration is published under Web Commerce Communications Limited dba WebNic.cc. Clear
- DNS for this domain is served by cloudflare.com, across 2 name servers. Noted
- The registration is paid up to 2027-03-14. Noted
- It is hosted on NetCraftersOU, from a server in UA. Noted
Domain intelligence
| Registrar | Web Commerce Communications Limited dba WebNic.cc |
|---|---|
| Hosting | NetCraftersOU - NetCrafters OU, EE |
| Country | UA |
| Server IP | 91.211.13.26 |
| Name servers | ANDY.NS.CLOUDFLARE.COM, BRENNA.NS.CLOUDFLARE.COM |
| SSL issuer | YE2 |
| SSL expiry | 2026-12-16 |
| Domain age | 0.52 years (continuous registration) |
| Domain expiry | 2027-03-14 |
| Archive first seen | Not available |
| Archive snapshots | 0 |
| Reputation | VirusTotal: 3 flagged | AbuseIPDB: 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about luminexclient.com at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.