If you're wondering whether osrs-world-3.l3deff.jagex.com is a scam or a fake, the short answer is no — it's a real Old School RuneScape world server operated by Jagex. The domain is hosted on Jagex's own network (AS44521), and the naming pattern matches official game worlds. The SSL certificate issue you might see in a browser is expected: this subdomain isn't meant to be visited over HTTPS in a web browser. Instead, the RuneScape game client uses its own secure connection to talk to this server. For a game server, missing contact pages or legal documents isn't a red flag — the main RuneScape site handles all of that. There are no blacklists, no malware warnings, and no phishing flags. If you're checking whether it's safe to connect to this world from the game, it is. Just don't expect to open it in Chrome and get a normal website.
In plain English
This is a legitimate Old School RuneScape game world server hosted by Jagex. The SSL certificate mismatch means you can't reach it in a web browser, but that's by design — the game client connects to these servers directly. Nothing here suggests a scam or phishing attempt.
Where the score comes from
The SSL certificate doesn't match this subdomain, so the site can't be reached over HTTPS. That's a technical misconfiguration, but for a game server that's accessed through the game client rather than a web browser, it's not a critical security risk. No malware or phishing flags found.
This subdomain is hosted on Jagex's own ASN (AS44521), which is a strong signal that it belongs to the legitimate RuneScape developer. The WHOIS for the parent domain jagex.com is not hidden, and the subdomain naming convention matches official game worlds.
No blacklists, no Google Web Risk threats, and a clean history. The lack of Wayback Machine snapshots is expected for a server subdomain that isn't meant to be a public website. The site is live and responding.
This is a game server endpoint, not a commercial website. It doesn't need an About page or contact info because it's not the kind of site where you'd expect to find that. The social media links on the page are consistent with the RuneScape brand.
No privacy policy or terms of service are present, but that's normal for a server subdomain that doesn't collect personal data or handle payments. The main RuneScape site (runescape.com) has its own legal pages.
The site loads quickly and has a robots.txt file, but it's missing common browser security headers and DNSSEC. For a game server these aren't essential, but the TLS certificate mismatch is a minor infrastructure flaw.
What we checked
Run this site? Show your score.
Add a trust badge so visitors can see your live score for themselves.
Get your badge →