Is curseforge.com a scam?

Our automated security review found no threat indicators on curseforge.com. The site appears legitimate based on the signals we checked, but always stay alert for phishing emails that spoof real domains.

Is curseforge.com safe to use?

curseforge.com passed our automated security checks with a trust score of 87/100. No antivirus engines or major blacklists flagged the site at the time of the last scan.

Does curseforge.com have a valid SSL certificate?

Yes. curseforge.com presents a valid TLSv1.3 certificate issued by Google Trust Services · WE1, expiring in 68 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.

Has curseforge.com been flagged by antivirus engines?

No. All 92 antivirus engines in our malware network report curseforge.com as clean.

Is curseforge.com on any phishing or malware blacklists?

No. curseforge.com is not currently listed on the major browser blocklist feeds that modern browsers use.

Where is curseforge.com hosted?

curseforge.com resolves to an IP operated by Cloudflare, Inc. in US (usage type: Content Delivery Network). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.

How often is the curseforge.com report updated?

We cache results for 24 hours. Signed-in MalwareTips members can trigger a manual rescan at any time using the "Rescan" button on the report page, which re-runs every check from scratch and refreshes this page.

SAFE

No threats detected

All checks passed. This site appears legitimate — but always stay alert for phishing even on trusted domains.

Security Review

Is curseforge.com legit or a scam?

Name: Is curseforge.com legit or a scam?
Item: curseforge.com
Rating: 5
Author: MalwareTips

Our verdict:Safe· 87/100

SafeSuspiciousDangerous

Official mod-hosting site for Minecraft and other games with clean antivirus scan and long operating history since 2007.

Why we trust it

Zero flags from our antivirus network across 92 engines.Valid SSL certificate with Google Trust Services.Active business registration under Overwolf since 2020 with roots to 2007.

curseforge.comScanned 4d ago

Post Facebook

Trust score

SAFE

Heuristics 90·MT 85

Category tags

mod hostinggaming90% MT confidence

Warning signals (1)

Redirects to another domain

Positive signals (4)

Antivirus clear Not on major blacklists Encrypted connection Clean server reputation

View density

Analysis Summary

Threat Intelligence

0/92

All engines report clean

Domain Age

—

Registration date unknown

MT Intelligence

Safe

Low likelihood · 90% confidence

MT Intelligence

Advanced threat intelligence

MT Security Analyst

Low scam likelihoodengineMT · Guardiantrust85/100

MT AgentLive web researchVisual inspection

Confidence

CurseForge operates as the main platform for user-generated mods and addons for games like Minecraft. The site shows zero detections across our antivirus network and major browser blocklists, with a clean hosting IP. Business records confirm active registration under Overwolf since its 2020 acquisition, with roots dating to 2007. While a few user complaints mention risks from malicious mod files uploaded by others, the core platform itself carries no malware or phishing flags. Positive mentions on independent review sites further support its legitimacy as a long-running service.

Full dossier

Analysis complete

Page Content

Official site for downloading and hosting mods for Minecraft, World of Warcraft, and similar games, with over 500,000 mods and billions of downloads reported.

Infrastructure

Valid SSL certificate issued by Google Trust Services, clean IP reputation with zero abuse reports, and no redirects to suspicious domains.

Domain History

Active business registration in Israel under Overwolf, acquired in 2020 from previous owner Curse LLC; no clone or typosquatting indicators detected.

Web Reputation

Positive scores on independent review aggregators and independent review aggregator; a small number of complaints focus on third-party malicious uploads rather than the site itself.

Risk Factors

Some Reddit users report malicious mod files being shared externally via Discord.
A YouTube video claims issues with fake mods and creator payments on the platform.

Positive Signals

Zero flags from our antivirus network across 92 engines.
Valid SSL certificate with Google Trust Services.
Active business registration under Overwolf since 2020 with roots to 2007.
Clean hosting IP with zero abuse reports.
Positive ratings on independent review aggregator and independent review sites.

AI Recommendation

The site is safe for browsing and downloading verified mods. Always scan downloaded files and avoid external links promising free mods.

Next-gen fraud intelligence

Evidence-backedCross-checked

Website Preview

LIVE RENDER

curseforge.com

Automated page render — captured in a safe sandbox. What an ordinary visitor would see when loading the site.

Web Research Findings

Our live research agent queries scam-report databases, consumer-review sites, news coverage, and general web search for curseforge.com, then cross-checks business-registration records and look-alike domain patterns. Everything below is pulled from what it actually found.

Business registration

Active · Israel (Overwolf)

Site traces back to an actively registered business.

Clone check

Not a clone

No well-known site's layout or branding detected here.

Typosquat check

No look-alike match

The domain doesn't resemble any well-known brand's spelling.

Web mentions

2 scam reports · 5 complaints · 2 positive

Key findings

7 headline facts from open-web research

curseforge.com is the official platform for downloading and hosting user-generated mods/addons for games like Minecraft, WoW; 500K+ mods, 100B+ downloads (site stats)
Owned and operated by Overwolf since June 2020 acquisition from Twitch; previously Curse LLC (founded ~2007)
Trustpilot rating: 4.0/5 based on 201 reviews
Scamadviser states it is legit and safe to use
Reddit discussions note general safety but warn of malicious user-uploaded content or external Discord scams using modpacks
Offers author reward program with 70% revenue cut; desktop app available via Overwolf
No evidence of domain being a typosquat or clone of any major brand

Scam reports (2)

Direct quotes from public scam databases, forums, and news.

Redditopen
"We've seen a big rise in people sending malicious modpack ZIPs and mods via Discord , and asking others to import these projects into their ..."
YouTubeopen
"CurseForge is full of viruses, fake mods, and has stolen money from it's creators, among other things."

Positive reviews (2)

Quotes indicating the site is legitimate.

Trustpilotopen
"Considering 68 reviews, reviewers had a great experience with this company."
Scamadviseropen
"In summary, It seems that curseforge.com is legit and safe to use and not a scam website."

Business registration

Status: active · Israel (Overwolf)

Acquired by Overwolf on Jun 22, 2020; originally founded 2007 as CurseForge by Curse LLC

Research summary

Narrative write-up from our AI analyst, grounded on the facts above

Our research found two scam-related mentions: a Reddit thread warning about malicious modpack ZIPs shared via Discord, and a YouTube video claiming viruses and payment issues. Two positive reviews appear on independent review aggregator (4.0/5) and independent review sites stating the site is legit and safe. Business records confirm ownership by Overwolf since 2020 with active registration.

Antivirus Engines

Clean pass · verified

Clean across 92 engines

We cross-check every URL against our antivirus network of 92 malware and blacklist engines. None of them flagged this URL in the last scan.

0Malicious0Suspicious61Harmless92Engines

Clean

Kaspersky

Clean

Bitdefender

Clean

Microsoft

Not in pass

ESET-NOD32

Not in pass

Avira

Not in pass

Sophos

Clean

Fortinet

Clean

Google Safebrowsing

Clean

Emsisoft

Clean

No engine detections. The URL passed every antivirus and blacklist engine we queried in this scan. Stay vigilant — AV coverage is only one signal among many.

Security Scans

Blacklist Check

Not flagged on major threat lists

Checked against the major public blocklists used by browsers and security tools — no hits.

Domain & Encryption

Encryption Certificate

StatusValid

ProtocolTLSv1.3

IssuerGoogle Trust Services · WE1

ExpiresAug 8, 2026 (68d)

Self-signedNo

Hosting & Technology

HostingCloudflare, Inc.

Server locationUS

Redirect Chain

Hops

Cross-domain

Yes

Lookalike

Punycode

1301http://curseforge.com/
2403https://www.curseforge.com/cross-domain

Server Reputation

Abuse Intelligence

Confidence score0%

Reports on file0

ISPCloudflare, Inc.

Usage typeContent Delivery Network

Still, stay alert

No major threat indicators — but a clean scan does not guarantee every page is safe, and phishing emails routinely spoof real domains.

Double-check the exact URL in your address bar
Confirm you are actually on curseforge.com and not a lookalike like c-urseforge.com.com or an IDN homoglyph.
Use a password manager
Password managers only auto-fill on the exact domain they were saved for — they refuse to fill lookalike domains, which is the single best phishing defence.
Discuss this site on the forum
If you have first-hand experience with this site — good or bad — share it with the MalwareTips community.
Open

Reputation Sources

How this domain rates across independent threat-intelligence and blocklist providers.

Google Safe Browsing

Not listedCheck ↗

VirusTotal

Not listedCheck ↗

AbuseIPDB

Not listedCheck ↗

Also verify:Spamhaus ↗DNSBL / SURBL ↗PhishTank ↗

Safety FAQ

Common questions about this site, answered from the scan data on this page. These are auto-generated — not hand-written — so they always match the underlying report.

Our automated security review found no threat indicators on curseforge.com. The site appears legitimate based on the signals we checked, but always stay alert for phishing emails that spoof real domains.

Final Verdict

Trust / 100

Final Verdict·curseforge.com

SAFE

CurseForge is the official platform for hosting and downloading game mods. Our analysis finds it legitimate with a clean security scan, valid SSL, and established ownership since 2007. Use caution with any user-uploaded files.

The site is safe for browsing and downloading verified mods. Always scan downloaded files and avoid external links promising free mods.

AV engines

MT passes

Net signals

Scan another URL

Security review completemalwaretips.com/url-scan

Recently scanned

Other Safe reports

woocommerce-1093796-5896757.cloudwaysapps.com

Community review

User reviews & comments(0)

Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.

Loading…

Loading comments…

This report is generated automatically by combining threat intelligence, domain signals, and an AI security analyst. It is informational, not legal advice. Always use your own judgement before sharing personal information or money online.