igrab.online

[hello@igrab.online]

Hello wot User Community!

Can you please rate my website. Free service for viewing and downloading from Instagram. All downloadable content belongs to the content authors. The download is available for informational purposes only.
The site has existed since the end of 2018 (previous domain igrab.ru) and has already helped a lot of people.

I am using Cloudflare certificates.
Many thanks!

Site URL:
igrab.online

Scorecard: https://www.mywot.com/scorecard/igrab.online

Privacy Policy:
igrab.online/privacy-policy


Whois information:
https://whois.domaintools.com/igrab.online

Ownership verification:
Verified

[A440]

Hello and welcome to WOT.

Your site appears to be safe and free of exploits and has a privacy policy in place.
Your SSL security rating is okay "B".

You could make some improvements on your site, however:

The site is missing a security header for clickcack protection.You could use a content-security-policy: frame-ancestors 'none'.
Affected pages:
https://igrab.online/404javascript.js
https://igrab.online/404testpage4525d2fdc

The site is missing a security header to prevent content type sniffing.

The site is missing a strict-transport-security security header.

The site is missing a content-security-policy directive. You could try adding the following CSP directives
(you can use default-src if all values are the same): script-src, object-src, base-uri, frame-src

I tried the site services out and could never get it to work though. Rats.

Rated.

[Site-rater]

Hello and welcome to WOT.

Your site appears to be safe and free of exploits and has a privacy policy in place.
Your SSL security rating is okay "B".

You could make some improvements on your site, however:

The site is missing a security header for clickcack protection.You could use a content-security-policy: frame-ancestors 'none'.
Affected pages:
https://igrab.online/404javascript.js
https://igrab.online/404testpage4525d2fdc

The site is missing a security header to prevent content type sniffing.

The site is missing a strict-transport-security security header.

The site is missing a content-security-policy directive. You could try adding the following CSP directives
(you can use default-src if all values are the same): script-src, object-src, base-uri, frame-src

I tried the site services out and could never get it to work though. Rats.

Rated.

User is boasting about Cloudflare certificates; is their server HTTPS-ready too? SSL Labs cannot reveal an insecure origin; it can only evaluate the HTTP server that services its requests.

Also, is this service legal or is it violating Instagram TOS?

[A440]

Also, is this service legal or is it violating Instagram TOS?

Yes, this occurred to me as well, however when I consider how Facebook/Instagram decided to claim ownership of Instagram users’ photos just because they wanted to, I realized that I didn’t care and do not consider FB’s IP rights to matter so much.

[A440]

I wish to add further to my review, due to advice from other WOT members, who have expressed concern with this site.

I finally was able to download a photo from an Instagram account and it was virus-free and there are no rogue links or scripts to report (cloudflare, google, purplestats, yandex).

The instruction page should specifically mention that one must go directly to the post which contains the photo one wants – not inside the modal pop-up. Anywhere else does not work. The instructions need to be more accurate and simple.

Due to concerns about review manipulations on Trustpilot, my rating is revised.

[hello@igrab.online]

What kind of manipulations are we talking about?
There was a widget on the site. Customers rated the site.