Is Automatic IG ™ Translator safe?
Automatic IG Translator sends Instagram DM text and your Pro login token over plain HTTP to its translation server.
When you use the built-in DeepL or GPT translation option on Instagram DMs, the extension sends the message text to translate-api.ext-api.com using an unencrypted http:// connection instead of https://. If you have an active Pro subscription, the same request also includes your session token, which authenticates your account to the extension's backend. Because the connection isn't encrypted, both the message content and the token are visible to anyone able to observe the network traffic, such as on public Wi-Fi.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
Who publishes itultracodinghq - 8 other listings from the same operator, none carrying a finding
ultracodinghq - 8 other listings from the same operator, none carrying a finding
What this publisher told the store about itself, and the other listings that told it the same thing.
Same store account
8 other listings published from this account, 18k+ users between them, none of them carrying a finding.
Shared hosts - 1 hostname
Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Where it sends data
Destinations our analysis observed Automatic IG ™ Translator contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- translate-api.ext-api.com
Automatic IG ™ Translator sends data to translate-api.ext-api.com. 13 other extensions we have analyzed send data here.