Dumpor: Does It Still Work, and Is It Safe?

Dumpor is online, but it did not show us anything. When we tested it on 24 September 2026, dumpor.com forwarded to dumpor.io, a domain registered in September 2024, and in two attempts its search stopped at a “Checking that you’re a human” screen that never cleared in our automated browser. Its banner promises “zero tracking”, yet the page we loaded sent data to Yandex Metrica, Google Analytics and Google’s advertising services.

Below is what we tested, what Dumpor’s own policies say, and how to keep your account away from viewer sites.

The short answer

• Does Dumpor still work? Not in our tests. Both attempts, about an hour and a half apart, stopped at its human check before any result. A person may get further.
• Is dumpor.io the same as dumpor.com? dumpor.com, registered in 2018, now forwards to dumpor.io, registered in September 2024. The records do not show whether the same people run both.
• Is it safe? It asked for no password, opened no pop-ups and installed no service worker. The issue is the tracking it says it does not do.
• Can it show private accounts? No, and it says so itself: public profiles only.
• Is it allowed? No. It works against Instagram’s Terms of Use.

How we tested

On 24 September 2026 we opened dumpor.com in a separate browser with no Instagram account signed in, searched twice for natgeo, National Geographic’s public account, and recorded every request the page made. We read Dumpor’s About, Terms, Privacy, Cookies and removal pages and checked the registration records of dumpor.com and dumpor.io. We did not allow notifications or get past any security check. Our editorial policy explains how pages like this one are made and corrected.

What happened when we used it

• The address changed. dumpor.com forwarded straight to dumpor.io.
• The search never returned. Typing natgeo and pressing Search showed “Checking that you’re a human” and nothing else, in both attempts, even after more than 20 seconds.
• Nothing was asked of us. There was no password field, no service worker and no new tab.

“Zero tracking”, checked

Dumpor’s banner promises “zero tracking”, and its About page says it works “without tracking people”. The home page we loaded sent requests to:

• Yandex Metrica, Yandex’s web analytics service;
• Google Analytics;
• Google AdSense, with Google’s ad-traffic and consent services;
• Cloudflare’s web analytics.

Dumpor’s own cookie policy lists a Google Ads cookie used for “Ad conversion tracking” and kept for 90 days, while describing advertising cookies as “off by default”. Neither its cookie policy nor its privacy policy mentions Yandex. Browser tracking protection or a content blocker cuts down these requests on any site like this.

What Dumpor says about itself

• It is clear that it shows public profiles only, that it is not affiliated with Instagram, and that it “cannot access private accounts”.
• Its terms say it may keep cached thumbnails and profile data to speed the site up.
• It offers a Telegram bot as another way to look up profiles. A Telegram bot can see the Telegram account that messages it, so lookups made there are not anonymous in the same way.
• Its removal form handles privacy requests under GDPR and CCPA as well as copyright complaints.

Is Dumpor allowed?

Instagram’s Terms of Use forbid “accessing or collecting information in an automated way without our express permission”, which is how every viewer site gets its content, and Instagram has taken viewer domains away from their operators through formal disputes; our Picuki check lists two of those cases. Downloading and reposting someone else’s photos or videos can also infringe their copyright.

If you do not want your account on Dumpor

• Make your account private. Viewer sites can only reach public accounts. In the Instagram app, go to your profile, tap the menu in the top right, then tap Account privacy under Who can see your content and turn on Private account (Instagram’s steps). Business profiles have to switch back to a personal account first.
• Share sensitive stories with Close Friends only. Those stories are not public, so viewer sites cannot show them.
• Use Dumpor’s removal form. It asks for your name, an email address, your role and the page address, never your Instagram password. We have not tested whether requests are acted on.

Frequently asked questions

Is Dumpor safe?

It asked for no password, opened no pop-ups and installed no service worker in our test. The problem is tracking: it promises “zero tracking”, but the page sent data to Yandex Metrica, Google Analytics and Google’s advertising services.

Does Dumpor still work?

Not in our tests on 24 September 2026. Both searches stopped at its “Checking that you’re a human” screen, which never cleared in our automated browser, so a person may get further than we did.

What happened to dumpor.com?

It forwards to dumpor.io, a domain registered in September 2024. The registration records do not show whether the same people run both.

Is it legal to use Dumpor?

Dumpor works against Instagram’s Terms of Use, which forbid collecting information in an automated way without permission. Downloading and reposting someone else’s photos or videos can also infringe their copyright. This is general information, not legal advice.

We will re-test Dumpor if its behaviour changes. If you see something different, tell us through the contact form.