Is Image & Video Downloader for Ins safe?
Image & Video Downloader for Instagram fetches request templates from its own server to list and download Instagram media.
The extension retrieves an encrypted configuration from igdownloader.echobot.dev and uses it to build the Instagram requests that list a profile's posts, reels and tagged media. It reads Instagram page tokens such as fb_dtsg and request fields from your session and keeps them in local browser storage. The code shows no upload of scraped Instagram data or tokens to the vendor; only sign-in, checkout and page-selector configuration go to its servers.
Who publishes itEchoWebBot Team - 6 other listings from the same operator, 3 of them carrying a finding
EchoWebBot Team - 6 other listings from the same operator, 3 of them carrying a finding
What this publisher told the store about itself, and the other listings that told it the same thing.
Same store account
6 other listings published from this account, 45k+ users between them. 3 of them carry a finding.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
What it can do
Permissions this extension asks for, as declared in version 1.0.0. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Read and change your data on instagram.com
*://*.instagram.com/*
Read and change your data on echobot.dev
*://*.echobot.dev/*
Store data in your browser
storage
Start, monitor and manage your downloads
downloads
Watch every request your browser makes
webRequest
Where it sends data
Destinations our analysis observed Image & Video Downloader for Ins contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- igdownloader.echobot.dev
Image & Video Downloader for Ins sends data to igdownloader.echobot.dev. No other extension we have analysed sends data here.