Is Auto Market safe?
Auto Market fetches shared Copart/IAAI login credentials from its backend and fills them into auction login forms.
On Copart and IAAI login pages, the extension requests a shared buyer account and password from the vendor's server and submits them for the user, so the user never sees the password. It also sends your public IP address, bids, lot page visits, watchlist actions and won vehicles on those sites to the vendor's server. It checks for debugging tools every two seconds and disables itself if one is attached.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
Who publishes itMC development - 12 other listings from the same operator, none carrying a finding
MC development - 12 other listings from the same operator, none carrying a finding
What this publisher told the store about itself, and the other listings that told it the same thing.
Same store account
12 other listings published from this account, 653 users between them, none of them carrying a finding.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Where it sends data
Destinations our analysis observed Auto Market contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- api.ipify.orgwidely used
Auto Market sends data to api.ipify.org. A widely used service: 58 other extensions we have analysed send data here.
- automarket.autoimports.ge
Auto Market sends data to automarket.autoimports.ge. No other extension we have analysed sends data here.