Chrome Web Store
7Versions
2Code reviewed

No malware found

In code review

Our reviewer read this extension’s code and found no malicious behaviour. An automated risk flag was reviewed and overturned.

11 indicators in this extension

11 indicators
2 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

What our analysis found

Email & Phone Finder for Instagram by LeadStal, used by 2,000 people, showed no malicious code in Extension Auditor's review. It comes from a trusted publisher and was last updated in August 2026.

Analyst notes

The 4.0.1 bundle is a small, unminified, readable extension that does exactly what its listing says: ` ` calls Instagram's own ` /` and ` /<id>/` endpoints with the user's existing session, runs the pure regex extractors in ` ` over the website, and renders the result into a closed shadow-root card on the profile page (`:437`). Grepping every file for absolute URLs yields only [domain withheld] API paths, static [domain withheld] marketing links, the [domain withheld] SVG namespace and the CWS update URL — there is no telemetry, no beacon, no upload sink of any kind, so no scraped contact ever leaves the browser. The published-manifest mismatch (`*://*.[domain withheld] + a WAR ` `) is stale-snapshot skew, not a hidden build: the signed ` ` treehash enumerates exactly the 29 files present and contains no ` `, and a semver-ordered query of `extension_versions` shows [domain withheld] belong only to the 3.0.x line (2025), superseded by 4.0.0 and then 4.0.1 which narrowed hosts from `<all_urls>` to `[domain withheld]. Publisher reputation ( malicious) and the 10%-malicious permhash cluster are the signals pointing the other way, and they are contradicted by the code itself.

Email & Phone Finder for Instagram by LeadStal

Email & Phone Finder for Instagram by LeadStal Chrome extension security report

ID: kfnibapoiikiffdipkddnombbpgkidap

Supported Languages

🇧🇷Brazilian Portuguese
🇨🇳Chinese (Simplified)
🇺🇸English
🇫🇷French
🇯🇵Japanese
🇰🇷Korean
🇵🇹Portuguese
🇷🇺Russian
🇪🇸Spanish
🇺🇦Ukrainian

Extension Info & Metadata

Status
Active
Version
4.0.1
Size
0.06 MB
Rating
4.6/5
Reviews
33
Users
2,000
Type
Extension
Updated
Aug 5, 2026
Category
Tools
Price
Free
Featured
No
Visibility
Listed
Mature
No
By Google
No
Trusted
Yes
This publisherTrack record
16extensions
2 no longer listed
Scanned by Extension Auditor — Low RiskDevelopers: embed this badge to link to this report.

Publisher Contextual Analysis

Trusted
Author
LeadStal.com
Country
BD
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Address
House: 1034, Avenue: 8 Mirpur DOHS Dhaka 1016 BD
Website
Visit
Extensions
16
Active
14
Obsolete
2
Listed
16
Unlisted
0
Users
9,550

Screenshots & videos

Screenshot 2
Screenshot 3
Screenshot 4
Screenshot 5
Screenshot 6
Screenshot 7
Screenshot 8
Screenshot 9
Screenshot 10
Screenshot 11
Screenshot 12
Screenshot 13

Install growth

Item
Type
Severity
Description
Contextual Risk Factors
Risk Factor
High
The following context increases the overall risk:• 20% increase: Access to sensitive domains increases potential impact
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
https://www.instagram.com/*
Host
Medium
Host permission — access limited to this URL pattern.
Access to Sensitive Domains
Risk Factor
Medium
This extension requests access to sensitive domains: https://www.instagram.com/*

Each row lists a threat category the scanner evaluates. A checkmark means the review ran and found no matching issues in that category for this version.

  • Data Exfiltration

    Code review completed; no malicious patterns detected for this category.

  • Unauthorized Data Collection

    Code review completed; no malicious patterns detected for this category.

  • Network Interception

    Code review completed; no malicious patterns detected for this category.

  • Code Injection

    Code review completed; no malicious patterns detected for this category.

  • Credential Theft

    Code review completed; no malicious patterns detected for this category.

  • Obfuscation

    Code review completed; no malicious patterns detected for this category.

  • Tracking

    Code review completed; no malicious patterns detected for this category.

  • Privilege Escalation

    Code review completed; no malicious patterns detected for this category.

  • Phishing

    Code review completed; no malicious patterns detected for this category.

  • Remote Code Loading

    Code review completed; no malicious patterns detected for this category.

  • Other

    Code review completed; no malicious patterns detected for this category.

11 indicators in this extension

11 indicators
2 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

About this extension

#1 IG Scraper & IG Email Finder by LeadStal.com

Read the publisher’s full description

IG Scraper & Email Finder is an online IG scraper tool that will help you get more B2B clients from IG to grow your business by working as an IG Leads Generator. This is the most powerful and fastest IG scraping tool to generate a ton of IG leads with valid emails and phone numbers, anywhere in the world. ✦✦ Types of IG Leads Your Can Scrape ✦✦ ➜ Leads from IG Hashtags ➜ Leads from IG Location ➜ Leads from IG Post Likers ➜ Leads from IG Post Commenters ➜ Leads from Profile Followers ➜ Leads from Profile Following ➜ Full Profile Scraping ✦✦ List of Data from IG Users ✦✦ ➜ Full Name ➜ User Name ➜ Followers & Following ➜ Account Type ➜ Bio & Website ➜ Average Likes ➜ Average Comments ➜ Post Engagement ➜ Estimated Post Price ➜ Estimated Story Price ➜ Email Addresses ➜ Phone Numbers ✦✦ List of Data from IG Posts ✦✦ ➜ Original Photo Download Link ➜ Total Likes ➜ Total Comments ➜ Caption & Hashtags ➜ Date & Time ▬▬ How to Scrape IG Hashtags or Locations ▬▬ 1. Install the extension by clicking the “Add to Chrome” button. 2. Go to IG and search for your Hashtag or Location 3. Click on the "Hashtag Leads" or "Location Leads" button which will be shown beside the search results. 4. Done! Now wait some time, Our tool will scrape data from IG and show you the result on the LeadStal result page. 5. You can easily filter users from the result page and extract your IG data as a CSV file. ▬▬ How to Scrape IG Followers or Following ▬▬ 1. Install the extension by clicking the “Add to Chrome” button. 2. Go to IG Profile and Click on Followers or Following to Open the List. 3. Click on the "Followers Leads" or "Following Leads" button which will be shown beside the search results. 4. Done! Now wait some time, Our tool will scrape data from IG and show you the result on the LeadStal result page. 5. You can easily filter users from the result page and extract your IG data as a CSV file. ▬▬ How to Scrape IG Likers or Commenters ▬▬ 1. Install the extension by clicking the “Add to Chrome” button. 2. Go to IG Post. 3. Click on the "Likers Leads" or "Commenters Leads" button which will be shown beside the search results. 4. Done! Now wait some time, Our tool will scrape data from IG and show you the result on the LeadStal result page. 5. You can easily filter users from the result page and extract your IG data as a CSV file. ▬▬ How to Scrape IG Profile ▬▬ 1. Install the extension by clicking the “Add to Chrome” button. 2. Go to any IG Profile. 3. Click on the "Profile Leads" button which will be shown beside the search results. 4. Done! Now wait some time, Our tool will scrape data from IG and show you the result on the LeadStal result page. 5. You can easily extract your IG data as a CSV file. ▬▬ FAQ ▬▬ How to Use IG Scraper Tool? IG Scraper & Email Finder is a user-friendly IG Scraper Tool. Just add it to your browser and go to IG profiles, hashtags, and locations. You will see one-click buttons to scrape leads for your business. Do You Need to Know to Code for IG Web Scraping? You don't need any type of programing language to run this IG Scraper. It's so easy to use and any type of person with little computer knowledge can use it. How to Scrape Emails From IG ? IG Scraper & Email Finder will help you to find user personal and business emails with one click. Does It Scrape IG Profiles? Yes. You can easily scrape any IG public profiles with our extension. Does It Scrape IG Followers Emails? Yes. You can easily scrape valid emails from followers and following lists with IG Scraper & Email Finder. How to Scrape Images From IG? Just add this extension to your browser and click on our buttons to scrape images from IG hashtags, locations, or profiles. Does IG Scraper Also Work as a Hashtag IG Scraper? Yes. Our tool will scrape hashtags from profiles and posts and you can easily export hashtags as CSV files or copy them with one click from result pages. Who Developed IG Scraper & Email Finder? IG Scraper & Email Finder developed by LeadStal team. ▬▬ Conclusion▬▬ So, Feel free to use our IG Scraper & Email Finder. After using IG Scraper & Email Finder | LeadStal extension, Please give us a 5-star rating! Thank You. This Privacy Policy can be also found here: https://leadstal.com/privacy-policy For any query related to LeadStal's IG Scraper & Email Finder, you can reach us via our Official contact page here: https://leadstal.com/contact Made with ❤️ in Upstal

User reviews

Extension files

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

URLs
7
IPv4
4

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found
No IP addresses found

11 indicators in this extension

11 indicators
2 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe
Version
Size
Verdict
Findings
Permhash
4.0.1
Latest
0.06 MBNo malware found0
49a25f9feefaffecad0fcd30c50dc9331cff8b55ece53def6285c09e17e6f5d7
4.0.0
0.06 MBNot scanned—
49a25f9feefaffecad0fcd30c50dc9331cff8b55ece53def6285c09e17e6f5d7
3.0.8
17.22 MBNo malware found0N/A
3.0.7
11.93 MBCaution—N/A
3.0.4
11.93 MBCaution—N/A
3.0.3
11.93 MBCaution—N/A
3.0.9
11.93 MBNot scanned—N/A
Showing 1 to 7 of 10 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

Gain full insight into all external connections.

Upgrade for full visibility.

Store rankings

Where this extension appears in store category, collection and keyword rankings.