mass.report
Scan Intelligence Report0/100
low Risk
runelite.net
https://runelite.net
IP
172.67.74.139 · Cloudflare, Inc.
Location
Toronto, Canada
Domain Age
3894 days
HTTP
200 · 19.4s
SSL
Valid· WE1, Google Trust Services, US
Status
COMPLETED
KB/IOK Matches (0)—
No KB/IOK detections were recorded for this scan.
RuneLite
UnknownTechnology · 4/29/2026
Summary
RuneLite.net presents as the official RuneLite client site (RuneLite branding, open-source description, and downloads). No evidence of credential harvesting, MFA theft, or impersonation of a third-party brand was found in the provided data. The page appears to be the legitimate RuneLite project site with normal product content and download links.
Evidence Summary
▸Observed 3 capture stage(s); canonical stage is late_render_3s.
▸Distinctive asset clues: 4.8d55af12.chunk.js, 7.27d25fc0.chunk.js, 7.7b033bdf.chunk.css, main.dd2bec91.chunk.css, runelite_logo_transparent_small.webp, discord.png.
Capture
Stages: 3
Canonical: Late Render (+3s)
Changed: No
Credential Signals
Forms: 1
Password fields: 0
Late-stage login UI: No
Resource Signals
Resources: 27
Hosts: 4
Domains: 2
Suspicious Endpoints
hxxps://runelite[.]net/img/features/discord.png
hxxps://runelite[.]net/
Observed Signals (0)
Observed Indicators (1)
▸No obvious login form or credential collection UI observed in static HTML
Risk AssessmentUsed in abuse reports
The scan shows the domain runelite.net serving the RuneLite brand with typical assets, navigation, and download options. There is no evidence of credential collection, phishing forms, or impersonation of another brand. The site appears to be the legitimate RuneLite project site and not a third-party mimic. Ongoing monitoring is recommended to detect any future changes or misuse, but current indicators do not support phishing or abuse at this time.
Recommended Action
Monitor
Cross-Reference8
URL Intelligence
Domain Intelligence
IP Intelligence
Public threat feed available — JSON API