Is Inspect - Crypto | NFTs | DeFi | Web3 safe?
Inspect - Crypto | NFTs | DeFi | Web3 is medium risk. Interacting with the extension's overlay or popups on Twitter/X sends your logged-in handle as the analytics user ID to Segment at api.segment.io, with browser context like the user agent, linking your identity to telemetry.
Who publishes itnftinspect - no other listings under this identity
nftinspect - no other listings under this identity
What this publisher told the store about itself, and the other listings that told it the same thing.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Findings
Twitter/X handle sent to Segment on overlay interactions
Interacting with the extension's overlay or popups on Twitter/X sends your logged-in handle as the analytics user ID to Segment at api.segment.io, with browser context like the user agent, linking your identity to telemetry.
What actually happens
The user interacts with the extension overlay or popup on Twitter/X.
The extension sends the logged-in Twitter/X handle as the Segment analytics user ID, along with browser context including the user agent.
Captured request
Fields in the request
- Your Twitter/X page content@example_user (illustrative)
The extension derives the logged-in account handle from the Twitter/X page and uses it as the analytics user ID.
- Your browser and tab contextMozilla/5.0 Chrome/126.0 (illustrative)
The analytics event includes browser context such as navigator.userAgent, which adds device and browser detail to the interaction record.
Observation
Dynamic analysis confirmed the content script sends the Twitter/X handle and navigator.userAgent to Segment during popup interactions.