https://account11521.osrsforum.it/
104.21.69.183 · Cloudflare, Inc.
Toronto, Canada
—
404 · 17.6s
Valid· WE1, Google Trust Services, US
COMPLETED
Domain Intelligence: osrsforum.it
Scanned 3 times since Mar 9, 2026, 01:24 AM UTC
Registered-domain escalation suggested
Suggested nowSubmit osrsforum.it as the primary IOC, enriched with evidence from hostile subdomains like account11521.osrsforum.it.
2 hostile subdomains across 2 completed scans were observed under this registered domain. Recent hosts: account.osrsforum.it, jagexaccounts.osrsforum.it.
No KB/IOK detections were recorded for this scan.
finance | technology | ecommerce | cryptocurrency | other · 4/5/2026
The page at account11521.osrsforum.it visually attempts to impersonate a trusted brand, but the domain is not the brand’s official domain. The page is effectively empty in static HTML, returns a 404, and the SSL cert is recently issued for osrsforum.it, with the hostname matching the suspicious subdomain. The attached screenshot is the strongest indicator of impersonation, suggesting a cloned login/credential harvesting interface, though no form exists in the static HTML. The lack of visible branding in the HTML source combined with the misleading domain strongly indicates a phishing setup intended to surface credentials on user interaction.
High risk of credential harvesting due to clear brand impersonation signals and user-facing phishing UI suggested by the attached screenshot. The domain does not belong to the legitimate brand’s domain space, yet the SSL certificate is freshly issued for the impersonated domain, and the page attempts to mimic a login experience despite no static HTML forms. This combination—domain impersonation, brand-aligned visual cues in the screenshot, and lack of legitimate asset loading—constitutes a deliberate phishing setup designed to deceive users into entering credentials. Immediate action should be taken to block or suspend the domain and investigate the hosting and registrant details for takedown and user protection.
Suspend Domain