Becareful instagram users. PHISHING ATTACKERS ARE ON TO US

So one guy hit me up on my IG account asking about shoutouts

He wanted to get 6 shoutouts so i offered him a price i thought was a good one.

Red flag number 1= Agreed instantly and didn't try to discuss the price with me at all for 6 shoutouts.

i can understand if someone agrees with the price if it's just one shoutout but with 6, almost everyone will try to talk about the price a bit more.

Red flag number 2= i asked for the caption and his promo pics/vid or whatever he wants me to post. he says he will pay first and the promo stuff is being created right now.

I say ok and gave him my paypal.

Then he asks me to give me a analytical graph of my account.

then he tells me has this website which he gives to everyone and just enter your info and send me a screenshot.

Website is www.ios-analyze.com

That in my eyes was a redflag number 3.

i opened it and it looked shady to me, so i sent him screenshots from another website and socialblade.

I looked up some free sites and got avg likes. avg impressions, avg engagements, avg comments and future follower.

he replies " not what i am looking for, please use ios-analyze.

I asked him what more info does he need? when he can see all the results of my posts on my instagram posts too ( Good likes/engagement etc)

i am not familiar with it and not comfortable.

he replies it's a popular site don't worry

Meanwhile i can't find anything about this site on google.... yeah seems pretty popular

next redflag number 4 - i looked up his ig on which he wants the shoutouts on, has all posts deleted and only 1 post remaining with 100k+ followers in it, probably stole that account too ?

So i tell him it looks fake and he goes GHOST.

What do you guys think about him and his website ?

Was my account in danger right now if i had logged in from his "popular site" ?

I feel like i did the right thing in rejecting all this.

Let me know your thoughts and once again becareful of account stealers.

Virus total says clean.. I didn't visit the site though...nothing in big g though

Good catch bro. Thank you for the information

When did this happen?

HallLiz said:

When did this happen?

Click to expand...

Just now

HallLiz said:

Virus total says clean.. I didn't visit the site though...nothing in big g though

Click to expand...

Virustotal says clean but I didn't trust it and i did not understand what more information did he need about my account when he can clearly see the amount of likes and comments on my accounts posts. And i sent him screenshots of other analytics from other site as well which didn't require me to login to my instagram.

I built my account manually and would hate to have it get hacked or stolen.

euhero said:

Good catch bro. Thank you for the information

Click to expand...

Welcome bro.

The domain was created 5-23-17

HallLiz said:

The domain was created 5-23-17

Click to expand...

Suspicious az fok.

"Popular site" made not even 1 day ago lol.

Explains why it's not indexed

HallLiz said:

Explains why it's not indexed

Click to expand...

Also explains that it's not a popular site like he claimed it to be and wanted me to use it by saying everyone he has worked with used this website.

How is that possible if just registered a domain for it.

So far i am not seeing any positives about this guy and his site.

Well he told everyone he works with at home and friends to check out his site.

Good catch OP. Something to look out for. Not to mention that every link on that site takes you to a fake IG login page. Hopefully, people are smart to realize that that's not an IG page.

I can't see him pulling this off on a big account (because they should know better), but can see him scamming several low to mid tier accounts who may be more anxious (compared to big accounts) to make money and let their defenses down.

Mistake maybe, I went to the website and the slider shows with screenshots show a totally different website. Phishing scam for sure.

Hella fake. All you gotta do is google the domain and check sites referencing it. Literally zero backlinks except this one post. I'm sure tons of people are going to fall for it though.

What a dummy, his real name, address and phone number are in the domain registry. I would report it to instagram and tell him you will be reporting him to the police for wire-fraud.

withatwist said:

Good catch OP. Something to look out for. Not to mention that every link on that site takes you to a fake IG login page. Hopefully, people are smart to realize that that's not an IG page.

I can't see him pulling this off on a big account (because they should know better), but can see him scamming several low to mid tier accounts who may be more anxious (compared to big accounts) to make money and let their defenses down.

Click to expand...

Yeah man I didn't want t have my account taken from me just for a little more cash.

madblackhatter1000 said:

What a dummy, his real name, address and phone number are in the domain registry. I would report it to instagram and tell him you will be reporting him to the police for wire-fraud.

Click to expand...

Told him to stop this shit or you will be in legal trouble soon. He's not replying lol.

Good catch.

The recipe to be safe out there is pretty simple: if a site asks for your instagram password, don't submit it. If a site uses OAuth, it is safe to use.

this isn't anything new? those sites have been around for a couple of years. anyone with half a brain already knows about this.

Thanks for sharing.

As long as you have your original email you can still recover the account.

sasukexx19 said:

Suspicious az fok.

"Popular site" made not even 1 day ago lol.

Click to expand...

LOL, overnight popularity they call it.
hahahahahahahahahahaha

Wow! You save us bro. In the past i caught up in this type of fake reporting email. i ended up in someone access my account from hong kong. But i managed to get all access back.
Thanks for this info mate.