runmarine-services[.]com

This domain, runmarine-services.com, is flagged for brand impersonation, specifically targeting POLO88, a known online platform. The site is currently active and presents a high-risk threat due to its deceptive content, which mimics the branding and page title of POLO88, including the phrase 'Perpustakaan Viral 123 Juta Followers.' Analysis indicates this is not a generic phishing attempt but a targeted effort to exploit the reputation of POLO88 for malicious purposes. Infrastructure analysis reveals the domain was registered on May 27, 2026, through Name SRS AB, a registrar often associated with suspicious domains. It resolves to the IP address 188.114.97.3 and uses a Let's Encrypt SSL certificate (E7). The domain has been flagged by 2 of 95 security vendors on VirusTotal and appears on one security blocklist. Despite its recent creation date, which is anomalous given the year, the domain remains operational and unmitigated by most security platforms. Current status confirms the domain is still active and serving deceptive content. Organizations and end-users are advised to block this domain at the network level and add it to endpoint protection rules. Security teams should monitor for any connections to the IP address 188.114.97.3 and investigate potential credential theft or unauthorized access attempts linked to this infrastructure. Users encountering this domain should avoid interaction, as it may lead to data exfiltration or further compromise.