Is Micode WebPhone safe?

Low risk

Micode WebPhone lets any web page trigger outbound VoIP calls from the user's logged-in softphone account.

The extension injects a window.ctcext provider into every page. Page scripts can call it to dial a number through the user's Zadarma, Novofon or Megacall account without a click or confirmation. The same provider also exposes the user's country, phone prefix, dialing rules, login state and Microsoft Dynamics contact lists to pages.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

ivanruizdelfinv1.0.11Chrome Web Store
15Risk
Who publishes it

ivanruizdelfin - no other listings under this identity, 3 shared hostnames

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
ivanruizdelfin

Shared hosts - 3 hostnames

Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.

megacall.es
Also called by 2 other listings: Click to call Zadarma, Click to call Megacall
zadarma.com
Also called by 2 other listings: Click to call Zadarma, Click to call Megacall
novofon.com
Also called by 3 other listings: Click to call Zadarma, Click to call Megacall, Novofon 2.0

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Updated 15 October 2026pjkdapbendchlkjkmgcpfckodiomjjnl