Is Salvage Copilot safe?

Low risk

Salvage Copilot sends Copart lot details to its AWS Lambda and fetches extra lots' VINs when the server asks.

On Copart lot pages, the extension reads the VIN, lot number and full lot details and posts them to the vendor's AWS Lambda to get bid predictions and history. The server's response can also name a second lot, whose unmasked VIN and plate the extension fetches using the user's Copart session and uploads back to the same endpoint.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

Salvage Copilotv1.0.6Chrome Web Store
15Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Where it sends data

Destinations our analysis observed Salvage Copilot contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • xmgeiktocrqbsqvb6jpu7rgule0empwx.lambda-url.eu-west-2.on.aws

    Salvage Copilot sends data to xmgeiktocrqbsqvb6jpu7rgule0empwx.lambda-url.eu-west-2.on.aws. No other extension we have analysed sends data here.

Updated 15 October 2026lkdilgmnahnaehklelcoegcopkacalgi