Is Fast save and repost for Instagram safe?
Fast save and repost for Instagram collects Instagram session cookies and auth headers, and sends Instagram link URLs to third-party spector.cx domains on user interaction.
The extension's background service worker reads all Instagram session cookies via chrome.cookies.getAll and captures authentication headers (x-ig-www-claim, x-asbd-id, x-instagram-ajax) from intercepted Instagram network requests, storing them locally for use in automated API calls. Content scripts injected into every page detect Instagram links and, when a user clicks a link overlay, open a new tab to one of three spector.cx-family domains (spector.cx, spector.team, or spector.ac) with the Instagram URL appended as a query parameter.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
What it can do
Permissions this extension asks for, as declared in version 4.7.9. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to. The current listed version is 4.8.0, which we have not unpacked yet.
Read and change your data on every site you visit
<all_urls>
Store data in your browser
storage
Read and change cookies, including the ones that keep you signed in
cookies
Start, monitor and manage your downloads
downloads
See the address and title of every tab you have open
tabs
Watch every request your browser makes
webRequest
Read information about your displays
system.display
Block and redirect the requests your browser makes
declarativeNetRequest
Where it sends data
Destinations our analysis observed Fast save and repost for Instagram contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- www.instagram.comwidely used
Fast save and repost for Instagram sends data to www.instagram.com. A widely used service: 28 other extensions we have analyzed send data here.
- spector.ac
Fast save and repost for Instagram sends data to spector.ac. No other extension we have analyzed sends data here.
- spector.cx
Fast save and repost for Instagram sends data to spector.cx. No other extension we have analyzed sends data here.
- spector.team
Fast save and repost for Instagram sends data to spector.team. No other extension we have analyzed sends data here.