If you landed on oldschool231.runescape.com thinking it's the real Old School RuneScape, take a hard second look. This site mimics the game but fails every basic test of legitimacy. There's no registered owner — the domain doesn't even appear in WHOIS databases, which is almost unheard of for a legitimate online game. There's no about page, no phone number, no email, and no way to know who runs it. The Wayback Machine has never captured a snapshot of this site, meaning it's either brand new or actively avoiding record keeping. Real gaming services have transparent ownership, contact support, and a visible history. This one has none of that. Our advice: don't log in here. It looks set up to collect usernames and passwords, not to let you play. If you want to play Old School RuneScape, go directly to the official site through your browser, not through a subdomain you found elsewhere.
No — oldschool231.runescape.com doesn't look safe
In plain English
This site is not the real Old School RuneScape. It has no identifiable owner, no internet history, and no contact method — despite asking for your login. The domain isn't even registered in WHOIS, which is frankly bizarre for any gaming service. Do not enter your credentials here.
What you should do now
Don't panic. These steps limit the damage, and the sooner you take them the better.
Don't enter any details
No passwords, card numbers or personal information — even if the site looks professional.
Close the tab
Especially if you got here from an email, text message or social media ad.
Already paid? Call your bank
Contact your bank or card provider right away. They can often stop or reverse a recent payment.
Warn others
Report the site and share this check with anyone who sent you the link.
Where the score comes from
The site has a valid SSL certificate from a reputable issuer and uses modern encryption. It's clean on Google Web Risk and DNS blacklists. However, it lacks essential browser protections that prevent clickjacking and other attacks — a basic security step most legitimate sites implement.
This domain doesn't exist in WHOIS records — it has no registered ownership you can look up. For any site that asks for a login, that's a serious red flag. A legitimate gaming service would have clear, traceable domain registration.
The site has no history in the Wayback Machine, suggesting it's either very new or deliberately avoiding archiving. It also doesn't appear in Tranco's top million sites. There's no established track record to evaluate, which is unusual for a well-known game brand.
There is no about page, no contact information, and no team details anywhere. The only social links exist but without any business identity behind them. A site presenting itself as an official RuneScape portal with none of these basics is hiding its operators.
The site does publish privacy policy and terms of service pages, plus a legal entity disclosure (Impressum-style page). For a gaming site that likely collects account data, those are good signs. But without knowing who actually runs the place, the legal pages lose some weight.
The site resolves to a single IP and uses a custom JAGeX server, which mimics the real RuneScape infrastructure. But it doesn't handle email (no MX records) and has no DNSSEC. The sitemap is broken. Decent uptime, but overall setup feels incomplete.
What we checked
Think this verdict is wrong?
Site owners can request a fresh scan. Scores update automatically as signals change.