Is BIDAUTO-Live safe?

Low risk

BIDAUTO-Live uploads your manheim.com cookies and logs auction page visits to its own servers.

After a Manheim session is valid, the extension reads all manheim.com cookies, including HttpOnly and partitioned ones, and posts them to the vendor's backend. On Copart and IAAI lot pages it sends lot details, a browser fingerprint, public IP geolocation and user IDs with each visit. It can also route manheim.com traffic through a vendor-supplied authenticated proxy.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

auctiongate.iov0.18.11.9Chrome Web Store
15Risk
Who publishes it

auctiongate.io - 9 other listings from the same operator, 7 of them carrying a finding

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
auctiongate.io
Website
bidauto.online/contact

Same store account

9 other listings published from this account, 11k+ users between them. 7 of them carry a finding.

AuctionGate10k+MediumMitridat690MediumINTERALEX132MediumCarex Auto109MediumBidPro90LowBex Auto75Medium3 more listings in the relationship graph, on paid plans →

Shared hosts - 20 hostnames

Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.

auction.copart.ca
Also called by 1 other listing: RAM Shipping
auction.copart.com
Also called by 1 other listing: RAM Shipping
negotiation.iaai.com
Also called by 1 other listing: RAM Shipping
wss-api.auctiongate.io
Also called by 1 other listing: RAM Shipping
2ip.io
Also called by 2 other listings
account.manheim.com
Also called by 2 other listings, including ListCentral Extension
api.allreports.tools
Also called by 2 other listings
auctiongate.io
Also called by 2 other listings, including Stat Vin
checkvin-online.com
Also called by 2 other listings, including Stat Vin
delivery-calculator.stat.vin
Also called by 2 other listings
deliverycalculator.parsite.dev
Also called by 2 other listings
extmetrics.auctiongate.io
Also called by 2 other listings
g2auction.copart.ca
Also called by 2 other listings
happycarservice.com
Also called by 2 other listings, including Stat Vin
helpdesk.auctiongate.io
Also called by 2 other listings, including Stat Vin
onesearch-api.manheim.com
Also called by 2 other listings
auctionhistory.io
Also called by 3 other listings, including OpenDataCar
portal.auctionnow
Also called by 3 other listings, including OpenDataCar
stat.vin
Also called by 3 other listings, including OpenDataCar
mcom-header-footer.manheim.com
Also called by 6 other listings, including OpenDataCar, Boss Motors extension, GLB GE extension

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Where it sends data

Destinations our analysis observed BIDAUTO-Live contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • ip-api.comwidely used

    BIDAUTO-Live sends data to ip-api.com. A widely used service: 73 other extensions we have analysed send data here.

  • json.geoiplookup.io

    BIDAUTO-Live sends data to json.geoiplookup.io. 17 other extensions we have analysed send data here.

  • auctiongate.io

    BIDAUTO-Live sends data to auctiongate.io. 10 other extensions we have analysed send data here.

Updated 15 October 2026enmiifnbfamffpkiaifbjhofhgomhhnp