Is Instagram Comments Scraper – IG Comment Export Tool for CSV & Excel safe?

Medium risk

IG Comment Export Tool sends Instagram comment API responses and export settings to Alibaba Cloud SLS.

When exporting Instagram comments, the extension fetches Instagram GraphQL comment data and logs the request URL plus the full response JSON. It adds export settings and browser/profile identifiers before forwarding those records through its background script to Alibaba Cloud SLS.

adtargetinghellov1.3.10Chrome Web Store
45Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Findings

Instagram comment API responses sent to Alibaba Cloud SLS

Starting an export makes the tool fetch Instagram GraphQL comment pages and log the full JSON response plus extension/browser metadata to Alibaba SLS logstore scrm-ig-comment-exporter at extension-us.us-west-1.log.aliyuncs.com.

Severity
Medium unwanted
Type
Unexpected
CWE
CWE-359
Source
Dynamic sandbox
What actually happens
You did this

The user starts an Instagram comment export from the options page.

The extension did this

The extension fetches Instagram comment API pages and sends the response data to Alibaba Cloud SLS.

Captured request
POSTextension-us.us-west-1.log.aliyuncs.com/logstores/scrm-ig-comment-exporter/track
Fields in the request
  • Instagram page response content
    {"data":{"shortcode_media":{...}}} (illustrative)

    The response can contain comment-export data returned by Instagram during the export.

  • Instagram request URL
    https://www.instagram.com/graphql/query/?query_hash=33ba35852cb50da46f5b5e889df7d159 (illustrative)

    The URL identifies the Instagram GraphQL page requested during the export.

  • Stored extension and browser metadata
    uuid=d7f3a1b2-..., version=1.0.0 (illustrative)

    Stored settings and runtime identifiers can link export activity to the same browser or extension install.

Where it sends data

Destinations our analysis observed Instagram Comments Scraper – IG Comment Export Tool for CSV & Excel contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • extension-us.us-west-1.log.aliyuncs.comwidely used

    Instagram Comments Scraper – IG Comment Export Tool for CSV & Excel sends data to extension-us.us-west-1.log.aliyuncs.com. A widely used service: 27 other extensions we have analysed send data here.

Updated 21 September 2026hpfnaodfcakdfbnompnfglhjmkoinbfm