Chrome Web Store
5Versions
1Code reviewed

No malware found

In code review (v5.0.0.100)

Our reviewer read version 5.0.0.100 — the most recent version we have reviewed — and found no malicious behaviour. The version shown here has not been individually reviewed yet.

What our analysis found

3CX Click2Call, used by 200,000 people, showed no malicious code in Extension Auditor's review. Its permissions mean it can read and change data on all websites. It comes from a publisher with 5 extensions and was last updated in July 2024.

The extension is a legitimate click-to-call tool for 3CX PBX. It scans web pages for phone numbers and converts them into clickable tel: links or routes them to a user-configured 3CX Web Client. All data flows are local (content-script ↔ background, storage, opening configured URLs). No external data exfiltration or suspicious network requests were found. The broad host permissions are necessary for its page-scanning functionality. The ML model likely flagged the extension due to its content script injection, broad permissions, and bundled-library patterns (eval, innerHTML) that are benign in context.

3CX Click2Call

3CX Click2Call Chrome extension security report

ID: baipgmmeifmofkcilhccccoipmjccehn

Supported Languages

🇺🇸English
🇫🇷French
🇩🇪German
🇮🇹Italian
🇵🇱Polish
🇷🇺Russian
🇪🇸Spanish

Extension Info & Metadata

Status
Active
Version
5.0.0.171
Size
0.25 MB
Rating
2.1/5
Reviews
154
Users
200,000
Type
Extension
Updated
Jul 30, 2024
Category
Social networking
Price
Free
Featured
No
Visibility
Listed
Mature
No
By Google
No
Trusted
No
This publisherTrack record
5extensions
2 no longer listed
Scanned by Extension Auditor — Low RiskDevelopers: embed this badge to link to this report.

Publisher Contextual Analysis

Author
3CX
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Website
Visit
Extensions
5
Active
3
Obsolete
2
Listed
2
Unlisted
3
Users
355,860

Screenshots & videos

Screenshot 1

Install growth

Item
Type
Severity
Description
*://*/*
Host
Critical
Broad host access — the extension can read/modify content on every website.
Broad Host Permissions
Risk Factor
High
This extension has broad host permissions allowing it to access many or all websites.
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
tabs
Permission
Medium
This permission enables tab management and monitoring. Rated Medium because it can track open tabs, access tab metadata, and monitor user browsing patterns.

Gain full insight into all external connections.

Upgrade for full visibility.

About this extension

The 3CX browser extension provides click2call from any website or CRM system for 3CX PBX users.

Read the publisher’s full description

The 3CX browser extension provides click2call from any website or CRM system for 3CX PBX users. With the 3CX extension, Click2Call functionality enables telephone numbers on any webpage or CRM system to be ‘hyperlinked’ allowing a simple click to initiate the call instead of copying and pasting. When setting up the extension, the extension options include the choice for the number to be passed to the 3CX Web Client or 3CX Softphone for Windows. Additionally, included within the settings is an ‘Exclusion list’ where you can set specific URLs in which you do not want the numbers to be ‘hyperlinked’. Important: This extension is only for use with 3CX V20, and is not a standalone extension.

User reviews

Extension files

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

URLs
14
IPv4
1

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found
No IP addresses found

Gain full insight into all external connections.

Upgrade for full visibility.

Version
Size
Verdict
Findings
Permhash
5.0.0.111
Latest
0.19 MBNot scanned—
58dd7981abfd4c2d32a79c42f462a9d91c27dbc3cbe354d3f71c88127aa7f9de
5.0.0.100
0.17 MBNo malware found0
58dd7981abfd4c2d32a79c42f462a9d91c27dbc3cbe354d3f71c88127aa7f9de
4.3.0.348
2.96 MBNot scanned—
57b04ba537dcfcc83234fa05d179b2d39c495029f9a6573b02c869ce6d785963
4.3.0.319
2.95 MBNot scanned—
6bce89ae27342d2807f03e27bd5aa73a7511509eafb75fa32a0b3cac54dfbc93
5.0.0.171
0.25 MBNot scanned—
58dd7981abfd4c2d32a79c42f462a9d91c27dbc3cbe354d3f71c88127aa7f9de
Showing 1 to 5 of 10 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

Gain full insight into all external connections.

Upgrade for full visibility.

More from 3CX

Popular in Social Networking