Verdict
odinclient.com shows high-risk / scam indicators.
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
| What this site appears to be | Site hosting Odin Client 26.2, a free Fabric mod for Hypixel Skyblock. Includes feature list (61+ modules), download links for Fabric 26.2 and classic 1.21.11 build, installation steps, and an FAQ. No payments or account requirements are present. |
|---|
Evidence status and limitations
Evidence completeness: UNKNOWN
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 14 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0 reportsAbuseIPDB; shared hosting inflates this count | Noted |
| Domain age | 6 months oldMost scam domains are under a year old | Risk |
| Web archive | Archived since 2018Public history exists | Clear |
| Certificate | Encrypted connectionIssued by YE1 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: less than 1 year (registration continuity).
- Public web-archive history exists since 2018.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Security Alert
Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.
Odinclient.com presents itself as a free downloadable Minecraft Fabric mod site for Hypixel Skyblock, offering Odin Client 26.2 and a classic 1.21.11 build with installation guidance, an in-game click GUI, and more than 61 gameplay-related modules; its stated model is non-commercial distribution without accounts, subscriptions, or payments.
Scam/Impersonation Risk
The site’s stated purpose and page behavior appear informational and software-download oriented: the homepage, features page, and FAQ describe free Fabric mod binaries, installation steps, and no account or payment requirement, while testing found no login form, sensitive form, wallet connection, external posting, or suspicious script activity. That benign presentation does not overcome the principal adverse signal: the domain is reported on a confirmed blacklist, with malicious detections from multiple security vendors. The downloadable JAR therefore presents a material software-supply-chain risk even though the pages themselves do not request credentials or payment. No conflicting legal-entity names, explicit brand impersonation, or phishing form were observed, but the external detections create a clear contradiction between the site’s presentation and its assessed reputation.
- The homepage identifies “Odin Client 26.2 for Fabric” and offers the downloadable `OdinClient-26.2.jar` without an account, subscription, or payment.
- The features page describes dungeon helpers, Floor 7 solvers, render tools, Skyblock functions, and Kuudra utilities bundled in one JAR.
- External reputation telemetry records 14 malicious and 2 suspicious detections, with Fortinet, Kaspersky, and Sophos among the flagged vendors; a confirmed blacklist condition is also recorded.
- The observed browser behavior recorded zero external XHR requests, zero wallet activity, zero hidden forms, and zero suspicious inline scripts across two successful runs.
Regulatory Verification Notes
The site identifies its operator only as “Odin Client” across the homepage, terms, privacy, credits, and product pages. The terms and privacy pages provide usage, liability, logging, and data-handling statements, but the supplied pages do not establish a separate legal entity, licensing authority, or registration number. For this type of free software distribution, that is a transparency and provenance gap rather than independent proof of fraud. Independent protocol intelligence recognizes odinclient.com as a named protocol, but the supplied recognition record provides no category or TVL, market-cap, or trading-volume figure; that signal should therefore be treated as limited contextual legitimacy evidence rather than a regulatory or licensing determination.
- The terms page states that Odin Client and its operators disclaim liability for damage, data loss, or account consequences arising from the site or downloaded files.
- The privacy page states that no account registration or personal information is required and that standard server logs may be retained.
- The credits page names an “Odin Dev Team,” community testers, and community reporters, but does not provide a separately identified legal entity.
- Domain registration telemetry records creation on 2026-03-23, with an age of 0.48 years; the registrar is Internet Domain Service BS Corp.
What to Verify Next
Before any execution of the downloaded software, obtain the file through an independently corroborated official distribution channel, compare cryptographic hashes or signatures where available, and scan the JAR in an isolated environment. Confirm that the stated Fabric builds and module behavior are consistent with the applicable Minecraft and Hypixel rules, and review the terms and privacy pages for changes before installation. Any organizational or licensing claim should be checked against an independent registry or other offline-verifiable source rather than accepted solely from the website.
- The FAQ instructs users to install Fabric Loader and place the downloaded mod into the relevant Minecraft profile.
- The terms page expressly disclaims responsibility for downloaded-file consequences, including account consequences.
- The site provides no account or payment workflow, so verification should focus on binary integrity, provenance, and platform-rule compliance.
Summary Verdict
The overall posture is critical trust with a high likelihood of sensitive-interaction harm, despite the site’s coherent software-download presentation and limited interaction surface. Independent recognition of odinclient.com as a named protocol is a positive contextual signal, but the supplied record does not provide the protocol’s category or any TVL, market-cap, or trading-volume magnitude, and it does not displace the confirmed adverse reputation evidence. The site’s apparent identity remains only likely rather than independently verified.
Infrastructure Integrity
The site resolves directly to one hosting address, 91.211.13.26, associated with NetCraftersOU in Estonia and geolocated in Ukraine; no CDN or WAF was detected, so the infrastructure provides limited protective separation between the service and its apparent origin. Transport encryption is present through a domain-validated certificate, which is a basic integrity control but not evidence that the downloadable software is trustworthy.
- Hosted on AS203273 (NetCraftersOU - NetCrafters OU, EE); resolved IP 91.211.13.26; country recorded as UA.
- TLS certificate issued by YE1, validation level DV, valid to 2026-12-15.
- Infrastructure telemetry records one unique IP, zero edge IPs, one likely origin IP, and no detected CDN.
Closing Assessment
The appropriate posture is to avoid login, credential, financial, or software-execution interactions with the site unless the binary’s provenance and integrity are independently established; read-only review of the public information is the proportionate low-risk use.
Written analysis generated 2026-09-17 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
2 findings contributed to this verdict, raised by registration and ownership, analysis engine, external reputation.
01 Governance Risk
- The registration record withholds contact details for the operator.Registration and ownership
rule:KF_WHOIS_HIDDEN - Registration details are held behind a privacy service, so no operator is named publicly. This is common and legal, and it also means there is nobody to check.Registration and ownership
rule:KF_WHOIS_PRIVATE
02 Sensitive Interaction Risk
- The analysis matched a pattern TrustSniffer treats as a direct threat to a visitor.Analysis engine
signal:direct_threat - An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it.External reputation
rule:EXT_BLACKLIST_CRITICAL
Identity verification
| Status | LIKELY |
|---|---|
| Identity score | 70/100 |
| Identity verification confidence | 36% |
- org:Odinclient
- on_site_identity
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of odinclient.com.
- The request stayed on odinclient.com. It was not redirected to another domain. Clear
- Registration is published under Internet Domain Service BS Corp.. Clear
- DNS for this domain is served by topdns.com, across 3 name servers. Noted
- The registration is paid up to 2028-03-23. Clear
- The earliest public archive of this site is from 2018-08-05. Clear
- It is hosted on NetCraftersOU, from a server in UA. Noted
Domain intelligence
| Registrar | Internet Domain Service BS Corp. |
|---|---|
| Hosting | NetCraftersOU - NetCrafters OU, EE |
| Country | UA |
| Server IP | 91.211.13.26 |
| Name servers | NS-CANADA.TOPDNS.COM, NS-UK.TOPDNS.COM, NS-USA.TOPDNS.COM |
| SSL issuer | YE1 |
| SSL expiry | 2026-12-15 |
| Domain age | 0.48 years (continuous registration) |
| Domain expiry | 2028-03-23 |
| Archive first seen | 2018-08-05 |
| Archive snapshots | Not counted (archive lookup incomplete) |
| Reputation | VirusTotal: 14 flagged | AbuseIPDB: 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about odinclient.com at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.