Is C2C Softphone safe?
C2C Softphone sends dialed numbers' geolocation lookups to Radar and calls to its own phone API using a hardcoded key.
The extension adds click-to-call softphone features to web pages and connects to the vendor's call servers. When a dialed number lacks a leading '+', it looks up the user's IP location through api.radar.io using a secret API key embedded in the extension code. Its page-level message listener on all sites also accepts login and logout messages without checking the sender, so a web page can set which account the softphone uses.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
Who publishes itContext To Call LLC - no other listings under this identity, 3 shared hostnames
Context To Call LLC - no other listings under this identity, 3 shared hostnames
What this publisher told the store about itself, and the other listings that told it the same thing.
Shared hosts - 3 hostnames
Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Where it sends data
Destinations our analysis observed C2C Softphone contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- api.radar.io
C2C Softphone sends data to api.radar.io. No other extension we have analysed sends data here.
- apis.vgroupinc.com
C2C Softphone sends data to apis.vgroupinc.com. No other extension we have analysed sends data here.
- phone-api.contexttocall.com
C2C Softphone sends data to phone-api.contexttocall.com. No other extension we have analysed sends data here.