horion.
Minecraft Bedrock mod download site with repeated trojan and riskware reports across review forums and independent review aggregator.
At a glance
Antivirus · registration · identity- Operator identity: Missing. No independently verifiable operator identity
- Trustpilot: The Horion client is a trojan/rat
- The domain was registered Aug 19, 2021 and was 5 years old at scan time.
- Google Safe Browsing returned no listed threat categories for this address at scan time.
- The site presented a valid TLSv1.3 certificate at scan time.
Intelligence
The page presents itself as the download site for Horion, a Windows-only Minecraft Bedrock utility mod linked to an archived GitHub project. Our research uncovered two direct scam reports, one calling the client a trojan on independent review aggregator and another noting Malwarebytes Riskware.Injector detections on forums, plus five total complaints. A single Reddit post claims it is safe, but this is outweighed by the malware warnings. The domain is over four years old with no business registration, and the page shows medium-confidence Minecraft branding on a non-official domain. These signals together indicate elevated risk for anyone downloading the client.
Evidence Map
Only one reputation source returned a usable result
No independently verifiable operator identity
No usable behavior observation was saved
The domain was registered Aug 19, 2021 and was 5 years old at scan time.
- 1independent review aggregator review labels the Horion client a trojan/rat.
- 2Forum reports document antivirus detections as Riskware.Injector.
- 3Five total complaints found alongside the malware warnings.
- 4Page uses Minecraft branding on a non-official domain.
- 5No business registration or contact details provided.
- 1Domain is 1746 days old with valid SSL certificate.
- 2Hosting IP shows zero abuse reports.
- 3One Reddit user reported no malware warnings after use.
Page Content
The site promotes Horion as a free open-source Minecraft Bedrock utility mod with GitHub and Discord links. It displays a platform warning for non-Windows users and loads external ad and analytics scripts.
Infrastructure
Domain is 1746 days old with valid SSL from Google Trust Services and a clean hosting IP reputation showing zero abuse reports. No redirects or homoglyph tricks detected.
Domain History
Registered through Cloudflare with no privacy protection. No company registration or commercial entity found in searches.
Web Reputation
Two scam reports and five complaints reference malware detections; one positive Reddit review exists. No top-site ranking or business verification present.
Web Research
The Horion client is a trojan/rat
Threat Detection
Antivirus results, browser warnings, isolated page observations, and the threat pattern identified in this report.
Antivirus engine results
Evidence behind this threat profile
- 1independent review aggregator review labels the Horion client a trojan/rat.
- 2Forum reports document antivirus detections as Riskware.Injector.
- 3Five total complaints found alongside the malware warnings.
- 4Page uses Minecraft branding on a non-official domain.
- 5No business registration or contact details provided.
2 of 22 categories showed signals
This profile separates the site's primary threat from other patterns supported by the saved page evidence, public research, and security findings.
- independent review aggregator review labels the Horion client a trojan/rat.
- Forum reports document antivirus detections as Riskware.Injector.
- Five total complaints found alongside the malware warnings.
- Page uses Minecraft branding on a non-official domain.
- No business registration or contact details provided.
- Tagged as a cracked-software / warez site.
- Crack / keygen / activator language.
Technical Details
Identity, domain, infrastructure, and connection facts saved with this scan.
June 1, 2026 at 8:01 PM UTCIdentity
6 facts- Operator
- Missing
- On-domain email
- Not observed
- Other email
- Not observed
- Phone
- Not observed
- Postal address
- Not observed
- Social profiles
- Not observed
Domain
8 facts- Domain age
- 5 years old
- Registered
- Aug 19, 2021
- Registrar
- Cloudflare, Inc.
- Expires
- Aug 19, 2026
- WHOIS updated
- Jul 25, 2025
- Registrant
- Unavailable
- Registration country
- Unavailable
- WHOIS privacy
- Not observed
Infrastructure
14 facts- HTTPS
- Valid certificate
- TLS protocol
- TLSv1.3
- Certificate issuer
- Google Trust Services · WE1
- Certificate subject
- horion.download
- Certificate valid from
- Apr 29, 2026
- Certificate valid to
- Jul 29, 2026
- Network address
- 104.21.88.135
- ASN
- Unavailable
- Hosting organization
- Cloudflare, Inc.
- Country
- US
- Server
- cloudflare
- Site platform
- Unavailable
- IP reputation
- 0% confidence · 0 reports
- Tor exit node
- No
Connections
13 facts- Scan scope
- Domain
- Destination host
- horion.download
- Redirects
- 1
- Cross-domain redirect
- No
- Redirect status codes
- 301 → 200
- Lookalike characters
- Not observed
- Internationalized domain
- No
- Page response
- 200
- Observation coverage
- Unavailable
- Extracted links
- Unavailable
- Unique IPs contacted
- Unavailable
- Countries contacted
- Unavailable
- Referenced domains
- 2
What to do
Do not download or run the client. The consistent malware reports make it unsafe for most users.
If you paid, contact your bank or payment provider immediately and preserve receipts and messages. If you shared personal information, monitor the affected accounts and change any reused passwords through the official service.
Final Verdict
Why this verdict
Horion.download is the official download page for a Minecraft Bedrock utility mod. Multiple reports on independent review aggregator and forums label the client as a trojan or riskware detected by antivirus tools. Do not download the files.
Do not download or run the client. The consistent malware reports make it unsafe for most users.
Key evidence
- 1independent review aggregator review labels the Horion client a trojan/rat.
- 2Forum reports document antivirus detections as Riskware.Injector.
- 3Five total complaints found alongside the malware warnings.
Safety FAQ
Is horion.download safe to use?+
Horion.download is the official download page for a Minecraft Bedrock utility mod. Multiple reports on independent review aggregator and forums label the client as a trojan or riskware detected by antivirus tools. Do not download the files.
What should I do about horion.download?+
Do not download or run the client. The consistent malware reports make it unsafe for most users.
How old is horion.download?+
horion.download is 5 years old and was registered aug 19, 2021.
What if I already interacted with horion.download?+
If you paid, contact your bank or payment provider immediately and preserve receipts and messages. If you shared personal information, monitor the affected accounts and change any reused passwords through the official service.
When was this report updated?+
This report reflects the scan completed June 1, 2026 at 8:01 PM UTC.
User reviews & comments(0)
Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.