Is WSpoints safe?
WSpoints sends your IP address and viewed Copart and IAAI lots to its servers and logs you in with vendor-supplied shared accounts.
On Copart and IAAI auction sites, the extension reports your public IP, the lots you view, live-bid actions and lane joins to ext.wspoints.com. For login, it requests shared account credentials from the vendor's server (ROT13-encoded) and submits them to the auction login forms, provided a companion extension is installed. This is a bidding broker service whose backend manages the bidding accounts.
Who publishes itSelf employed - 14 other listings from the same operator, none carrying a finding
Self employed - 14 other listings from the same operator, none carrying a finding
What this publisher told the store about itself, and the other listings that told it the same thing.
Same store account
14 other listings published from this account, 2k+ users between them, none of them carrying a finding.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Where it sends data
Destinations our analysis observed WSpoints contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- api.ipify.orgwidely used
WSpoints sends data to api.ipify.org. A widely used service: 58 other extensions we have analysed send data here.
- ext.wspoints.com
WSpoints sends data to ext.wspoints.com. No other extension we have analysed sends data here.