Is Twitch Auto Bonus - Авто Бонус safe?
Twitch Auto Bonus sends channel bonus-claim events with a persistent install ID to apiget.ru.
When bonus collection is enabled on Twitch, the extension clicks claimable channel bonus buttons and records each claim with the channel name, timestamp, and a persistent random client ID stored locally. It POSTs those pending claim events to apiget.ru immediately after a claim and on a periodic retry timer.
Who publishes itApiGet - 2 other listings from the same operator, 1 of them carrying a finding
ApiGet - 2 other listings from the same operator, 1 of them carrying a finding
What this publisher told the store about itself, and the other listings that told it the same thing.
Same store account
2 other listings published from this account, 59k+ users between them. 1 of them carries a finding.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Findings
Twitch bonus-claim events are sent to apiget.ru with an install ID
Enabling collection on Twitch checks for bonus buttons every second and records claim events for the channel.
Events POST to apiget.ru/Twitch-Auto-Bonus/ingest.php with a persistent local client ID, channel name, event ID, and timestamp.
- Severity
- Medium unwanted
- Type
- Unexpected
- CWE
- CWE-359
- Source
- Dynamic sandbox
The user enables Twitch bonus collection.
The extension records Twitch channel bonus-claim events and sends them to apiget.ru with a persistent install identifier.
- Twitch channel URL context(illustrative) https://www.twitch.tv/examplechannel
Shows which Twitch channel page was active when the bonus claim event was recorded.
- Browsing activity event(illustrative) examplechannel at 2026-07-13T10:45:00Z
Links bonus-claim activity to a channel and timestamp, creating a history of these Twitch page interactions.
- Persistent local client ID(illustrative) d7f3a1b2c4e5890f1122334455667788
Lets the remote endpoint associate multiple bonus-claim events with the same extension installation over time.
Where it sends data
Destinations our analysis observed Twitch Auto Bonus - Авто Бонус contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- apiget.ru
Twitch Auto Bonus - Авто Бонус sends data to apiget.ru. No other extension we have analysed sends data here.