Is Pixcall safe?
Pixcall rewrites Referer headers and relaxes CORS for third-party image/CDN requests.
Pixcall installs dynamic browser network rules for XMLHttpRequests to image and CDN hosts including sinaimg.cn, bigurl.ink, cdninstagram.com, dtstatic.com, and i.pximg.net. Those rules set the request Referer to related sites such as Weibo, Instagram, Duitang, Pixiv, or BigBigWork and set Access-Control-Allow-Origin to '*', allowing other web origins to read matching responses.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Where it sends data
Destinations our analysis observed Pixcall contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- i.pximg.net
Pixcall sends data to i.pximg.net. One other extension we have analysed sends data here.
- bigurl.ink
Pixcall sends data to bigurl.ink. No other extension we have analysed sends data here.
- cdninstagram.com
Pixcall sends data to cdninstagram.com. No other extension we have analysed sends data here.
- dtstatic.com
Pixcall sends data to dtstatic.com. No other extension we have analysed sends data here.
- sinaimg.cn
Pixcall sends data to sinaimg.cn. No other extension we have analysed sends data here.