m[.]1455bets10[.]cc

Analysis of m.1455bets10.cc shows a high‑confidence brand‑impersonation campaign targeting Instagram users. The domain was registered on October 08, 2025 via Gname.com Pte. Ltd. and resolves to IP address 216.225.193.171, which belongs to AS8560 IONOS SE and is geolocated in the United States. Nameserver records point to a4.share-dns.com and b4.share-dns.net, typical of fast‑flux or shared hosting services. No TLS certificate is presented, indicating the site was served over plain HTTP only.

The only visible content, captured before takedown, is the page title "BAHİS EĞLENCESİNE CEBİN DOLU BAŞLA – Bets10 Kampanyalar," which aligns with a crypto‑gambling narrative and does not reference Instagram directly, but the campaign metadata lists Instagram as the impersonated brand. VirusTotal scans flagged the domain on nine of ninety‑five engines, and a Gridinsoft trust score of 0 / 100 reinforces the malicious classification. The domain appears on a single external security blocklist and has been actively blocked by the PhishDestroy network, after which it was taken offline. While the exact phishing page layout and credential‑harvesting mechanisms are not publicly documented, the combination of brand impersonation, malicious hosting, and low trust scores indicates a credible threat.

Defenders should continue to block the domain and associated IP, monitor for any re‑registration attempts, and enforce URL filtering for the host. Network traffic to 216.225.193.171 should be scrutinized for outbound connections that may indicate ongoing crypto‑gambling malware. Incident response teams receiving reports of Instagram‑related credential theft should consider this indicator as part of their IOC set, and users should be warned that any unsolicited links purporting to offer Instagram services from this domain are malicious.