Is Inscarry - 适用于Instagram的下载器 safe?

Low risk

Inscarry sends Instagram API responses fetched with your browser cookies to extension.inscarry.com.

When asked to download a post, Inscarry builds an Instagram API URL through extension.inscarry.com, fetches it with cookies from instagram.com and www.instagram.com, and posts a base64-encoded copy of the response back to extension.inscarry.com/instagram/prase. Its drawer page is exposed to Instagram, Bilibili, and Inscarry pages and accepts download commands via postMessage, so those allowed pages can trigger the cookie-backed download flow.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

xiaopei9823v8.1.0Chrome Web Store
15Risk
Who publishes it

xiaopei9823 - 1 other listing from the same operator, none carrying a finding

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
xiaopei9823

Same store account

1 other listing published from this account, 433 users between them, none of them carrying a finding.

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Where it sends data

Destinations our analysis observed Inscarry - 适用于Instagram的下载器 contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • extension.inscarry.com

    Inscarry - 适用于Instagram的下载器 sends data to extension.inscarry.com. No other extension we have analyzed sends data here.

Updated 2 November 2026cimndeklppfflihfkgemncpkabpgpkma