Is Check Engagement Rate Instagram & Tiktok by KOL.ID safe?

Low risk

The extension lets TikTok and Instagram page scripts request downloads and settings changes through its message bridge.

On TikTok and Instagram pages, its content bridge forwards page-world messages to the extension background script. Those messages can carry caller-supplied URLs for download actions and settings payloads that are written to Chrome sync storage.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

KOL.IDv1.0.10Chrome Web Store
15Risk
Who publishes it

KOL.ID - no other listings under this identity, 1 shared hostname

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
KOL.ID
Declared legal entity
KOL.ID
Registered address
Jl. Palmerah Utara Iv No.11 Unit A Lantai 1 Palmerah, Kota Jakarta Barat, DKI Jakarta 11480, ID
Registered contact
PT. GLOBAL DIGITAL TALENTA

Shared hosts - 1 hostname

Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.

kolsprite.com
Also called by 9 other listings

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Updated 30 September 2026kcobgdhckaoekmalpmalpcpfmghmklid