Security Alert: Malware Risk Confirmed

This extension is flagged as malware and the latest analysis also reports severe findings. Remove it immediately if installed.Extension: WebPhone.app

CRITICAL RISKStill available - exercise caution

WebPhone.app

ID: pckfmljpbecelndlfeecdjdmpcpmhmpj

Supported Languages

🇷🇺Russian

Extension Info & Metadata

Status

Active

Version

1.1.1

Size

1.53 MB

Rating

5.0/5

Reviews

Users

Type

Extension

Updated

Apr 24, 2026

Publisher Contextual Analysis

Author: http://webphone.app/View Profile
Privacy: Privacy Policy
Country: RU
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: Yes
Mailbox exists: Yes
Address: Москва Москва 115193 Россия
Website: Visit

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

WebPhone.app Extension for Chrome

ВебФон - Инструмент связи для бизнеса! WEB ТЕЛЕФОНИЯ - Без набора номера - Без программ и оборудования - Настройка в один клик через браузер Установка телефона в один клик. - Если провайдер наш партнер, то настраивать ничего не нужно - Вводите Логин, пароль. ВСЁ телефон работает! Без покупки оборудования - Вам не нужно покупать маршрутизаторы, телефоны. - И пичкать проводами свой офис. Теперь вы свободны в выборе! - Мы поддерживаем любого оператора связи - А если это наш партнер, получайте скидку на связь! Автонабор номера! - На любой страничке, клик по телефону - набор пошел! - Нет простоя при наборе номера вручную - производительность удваивается. Запись и статистика разговоров - Подгружается рядом с телефоном, на любой страничке сайта! - Слушайте, анализируйте – улучшайте показатели. ДЛЯ ЛЮБОЙ CRM - Записи разговоров, статистика, контроль - WebPhone уже в строился в вашу CRM - Задачи, заметки, карточка клиента Интеграция без настроек - Установите код на сайт, или расширение. - WebPhone встроиться на страничке, можно звонить! Когда Вам звонит клиент - Мы подскажем как его зовут, отобразим историю общения. - Обращайтесь по имени и стройте правильно беседу. Когда Вы звоните клиенту - Проигрывайте свои аудио-приветствия из шаблонов - Говорите только если это необходимо в любой момент. Добавляйте сотрудников На сайте нажмите “Добавить сотрудника” и ВСЁ! Сотрудник звонит, и работает под вашим контролем НАШИ ПАРТНЕРЫ - Операторы связи - CRM системы - Любой сайт Сайт проекта: webphone.app

User Growth

Showing data from Apr 24, 2026 to Jul 29, 2026

Versions

+118.18%(+26 users)

Compared to 3 months ago

2 versions released in this period

Rating Count

Total: 1 ratings

Average Rating

Current: 5.00 / 5.0

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical0

High2

Medium2

Low0

Versions scanned

Showing 1 of 2 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.1.1 Code review	4

Extension Version	Code Review Findings
1.1.1	4

Files with findings

3 distinct paths — top paths by unique finding count:

dist/chrome/content.js2
dist/chrome/background.js1
manifest.json1

S.No.	Category	Severity	File	Summary	Found in Version
1	Credential Theft	high	dist/chrome/content.js (line 309)	The content script (matches: <all_urls>, run_at: document_start) requests the user's webphone.app PHPSESSID session token from the background service worker and writes it into the page DOM via document.body.setAttribu…	1.1.1
2	Credential Theft	high	dist/chrome/background.js (line 2517)	Background worker harvests the PHPSESSID authentication cookie via chrome.cookies.get / getAll for the webphone.app domain, persists it to chrome.storage.local, refreshes it on every cookie change (chrome.cookies.onCh…	1.1.1
3	Code Injection	medium	dist/chrome/content.js (line 311)	Unconditional main-world script injection on every URL the user visits: the content script (matches <all_urls>, document_start) appends a <script src=chrome-extension://.../dist/chrome/api.js> tag to document.head of …	1.1.1
4	Unauthorized Data Collection	medium	manifest.json (line 22)	Manifest grants a content script that runs on <all_urls> at document_start while the host_permissions are scoped only to webphone.app — the content script therefore has no legitimate need to execute on third-party ori…	1.1.1

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


js.webphone.app	/$%7Bt%7D	https://js.webphone.app/${t}?${this.getPackageVersion(
www.w3.org	/1999/xlink	http://www.w3.org/1999/xlink
www.w3.org	/2000/svg	http://www.w3.org/2000/svg
www.w3.org	/1998/Math/MathML	http://www.w3.org/1998/Math/MathML
mozilla.github.io	/localForage/	https://mozilla.github.io/localForage/#definedriver
github.com	/zloirock/core-js/blob/v3.49.0/LICENSE	https://github.com/zloirock/core-js/blob/v3.49.0/LICENSE
github.com	/zloirock/core-js	https://github.com/zloirock/core-js
feross.org	-	http://feross.org
james.padolsey.com	-	http://james.padolsey.com
unlicense.org	/UNLICENSE	http://unlicense.org/UNLICENSE

Showing 1 to 10 of 40 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

5.0 out of 5 · 1 most recent review

Text reviews

Positive

Negative

Отличная звонилка,все просто,удобно,понятно,рекомендую всем.

Nikita Bogoslovskiy·27 Sept 2018

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Malware Risk Confirmed

WebPhone.app

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

Screenshots & Videos

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 2 Versions4

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating