Website safety reportLast scanned Jun 18, 2026

Is Modrinth Safe?

Ads, Trackers, Security & UX Review

6 public pages rendered. The score, signal cards, and evidence tables below show what appeared in the browser sample.

Status

Scan completed

Host

modrinth.com

Confidence

72/100

Observed safety score

Moderate observed risk

Ad risk: Low
62/ 100

Signal mix

Mixed
AdsLow
TrackingModerate
SecurityModerate

0

Ad domains

4

Tracker domains

72/100

Confidence

Host

modrinth.com

Browser tools and downloads

Hosting

CLOUDFLARENET - Cloudflare, Inc., US

104.18.23.35; AS13335

TLS

Enabled

Let's Encrypt

Requests

925

4 third-party domains observed

Risk map

What the scan noticed

Four quick signals first. Evidence stays grouped by risk area.

Moderate

Data risk

Tracking signals

Moderate

Security posture

Baseline checks

Moderate-low

User experience

Low friction

Low

Ad risk

Low ad pressure

Data risk4 3rd-party domains seen.Moderate

Meaning

The rendered scan observed 4 tracker-domain matches, led by js.stripe.com (18), m.stripe.network (12), m.stripe.com (6) and 1 more, and up to 7 cookies across the sampled public pages.

Evidence

  • 4 3rd-party domains seen.
  • 4 tracker-domain matches were classified as known tracker patterns in the browser sample.
  • 7 total cookies and 1 3rd-party cookies seen.
  • 11 privacy, terms, help, safety, or opt-out style links were discovered.
  • The enrichment sample included visible cookie, tracking, or analytics language.
Security postureCSP header was not observed in the fetched response.Moderate

Meaning

Security posture is based on observed TLS, response headers, mixed-content behavior, and usable external-check output.

Evidence

  • CSP header was not observed in the fetched response.
  • TLS connected with TLSv1.3; issuer: Let's Encrypt.
  • HSTS header seen.
  • X-Frame header seen.
  • No mixed-content requests seen in the rendered browser sample.
User experienceNo notification permission prompts seen.Moderate-low

Meaning

The rendered public-page sample loaded with HTTP 200 and 13166 visible text characters.

Evidence

  • No notification permission prompts seen.
  • 13166 rendered text characters seen.
  • Fetched page returned HTTP 200.
  • Sampled page titles: Modrinth; Privacy Policy - Modrinth; Terms of Use - Modrinth.
Ad risk0 ad-domain matches were classified as known ad-network patterns in the browser sample.Low

Meaning

The rendered scan did not observe obvious ad-network domain matches across 6 sampled public pages.

Evidence

  • 0 ad-domain matches were classified as known ad-network patterns in the browser sample.
  • 925 browser requests seen.
  • 1 static script domain seen across the enrichment sample.
  • No pop-up window calls seen in the automated pass.
Evidence

Scan evidence at a glance

Key signals first, with important limits kept close so the report stays useful without overstating certainty.

Captured evidence

Direct observations

6

Pages sampled

Rendered browser pass

925

Requests

4 third-party - 0 ad - 4 tracker

7

Cookies

1 third-party

Headers

Security posture

HSTS yes - CSP no - X-Frame yes

Scan boundary

Important limits

Can vary

Installer path

Mirror, OS, bundles

Can change

Ad context

Location, consent, A/B tests

External checks

Source signals

Clear

Safe Browsing

Google Transparency Report Safe Browsing status returned no threat matches for 1 URL

Flagged

HTTP Observatory

MDN HTTP Observatory returned grade B with score 75 and 1 failed checks

Ads and trackers

Ads and trackers found in the scan

Observed domains are grouped by company or tool, purpose, request volume, and the sampled pages where they appeared.

2

Entities

Companies or tools grouped from observed domains.

1

Categories

Most active: Tracking and measurement.

42

Requests

Classified ad or tracker requests in the sample.

6/6

Pages seen

Sampled pages with at least one classified signal.

Activity by purpose

Grouped by evidence

Tracking and measurement

2 entities / 4 domains

42

Top observed entities

Stripe

Tracking and measurement

tracker

36

requests

6/6

pages

js.stripe.comm.stripe.comm.stripe.network1.1% web prevalence

Cloudflare

Tracking and measurement

tracker

6

requests

6/6

pages

static.cloudflareinsights.com22% web prevalence

Tracker-domain evidence

Raw domains and request paths classified as tracker matches in rendered samples.

4

domains

42

classified requests

6

pages with matches

js.stripe.com

Matched DuckDuckGo Tracker Radar tracker patterns during the rendered public-page sample. Observed on 6 rendered pages. Request types: script, document.

18 requests

Seen in sample

6 sampled pages

Request types

scriptdocument

Context

Prevalence: 1.1%

Matched hosts

js.stripe.com

Domain matched DuckDuckGo Tracker Radar tracker patterns.

m.stripe.network

Matched DuckDuckGo Tracker Radar tracker patterns during the rendered public-page sample. Observed on 6 rendered pages. Request types: document, script.

12 requests

Seen in sample

6 sampled pages

Request types

documentscript

Context

Prevalence: 0.2%

Matched hosts

m.stripe.network

Domain matched DuckDuckGo Tracker Radar tracker patterns.

m.stripe.com

Matched DuckDuckGo Tracker Radar tracker patterns during the rendered public-page sample. Observed on 6 rendered pages. Request types: xhr.

6 requests

Seen in sample

6 sampled pages

Request types

xhr

Context

Prevalence: 1.1%

Matched hosts

m.stripe.com

Domain matched DuckDuckGo Tracker Radar tracker patterns.

static.cloudflareinsights.com

Matched DuckDuckGo Tracker Radar tracker patterns during the rendered public-page sample. Observed on 6 rendered pages. Request types: script. Classified owner: Cloudflare. Tracker owner: Cloudflare.

6 requests

Seen in sample

6 sampled pages

Request types

script

Context

Owner: CloudflarePrevalence: 22%

Matched hosts

static.cloudflareinsights.com

Domain matched DuckDuckGo Tracker Radar tracker data for Cloudflare.

Alternatives

Modrinth alternatives to compare before choosing

These options are category-relevant comparison leads for Modrinth. Each card separates why it is comparable and when it fits.

GitHub

github.com

Visit

Why compare it

GitHub is a related comparison lead for software project source and release pages.

Best fit

Use it as a discovery lead, then compare its own ads, trackers, cookies, and security signals before deciding.

SourceForge

sourceforge.net

Visit

Why compare it

SourceForge is a related comparison lead for software download listings.

Best fit

Use it as a discovery lead, then compare its own ads, trackers, cookies, and security signals before deciding.

MajorGeeks

majorgeeks.com

Visit

Why compare it

MajorGeeks is a related comparison lead for software utility downloads.

Best fit

Use it as a discovery lead, then compare its own ads, trackers, cookies, and security signals before deciding.

PortableApps

portableapps.com

Visit

Why compare it

PortableApps is a related comparison lead for portable software downloads.

Best fit

Use it as a discovery lead, then compare its own ads, trackers, cookies, and security signals before deciding.

FAQs

Modrinth safety questions answered

Is Modrinth safe to use?

Latest scan of Modrinth across 6 public pages captured 925 browser requests, 4 third-party domains, 0 ad-domain matches, 4 tracker-domain matches, and 7 cookies (1 third-party). Header gaps: CSP. External checks: Safe Browsing clear; HTTP Observatory flagged. This is not a guarantee of safety; it is a time-bound public-page evidence report.

What did Blockify actually observe on Modrinth?

Key observations from the rendered sample: 925 browser requests, 4 third-party domains, 0 ad-domain matches, 4 tracker-domain matches, and 1 third-party cookie. Header gaps: CSP.

Does Modrinth use ads or trackers?

The rendered public-page scan found 0 ad-domain matches and 4 tracker-domain matches across 6 sampled pages. The most active matches were js.stripe.com (18), m.stripe.network (12), m.stripe.com (6) and 1 more.

What should I check before downloading from Modrinth?

Verify the final download host, installer name, code-signing details, update channel, browser prompts, and whether the installer offers bundled software.

Why does the report show modrinth.com instead of another domain?

We tested modrinth.com because it is the website address selected for this report.

What should I compare before choosing Modrinth alternatives?

Compare the same evidence categories: rendered requests, ad-domain matches, tracker-domain matches, cookies, security headers, external checks, and whether each alternative fits the same user task.

Can Blockify guarantee that this website is safe?

No. Blockify can reduce ads, trackers, and pop-ups in the browser, but no scan can guarantee every page, account flow, future visit, or personalized state is safe.