Is WA-CRM: Best WA CRM for Business Development and Sales Teams safe?
WA-CRM patches WhatsApp Web's link-preview function to send every URL typed in a chat to third-party preview servers first.
The extension replaces WhatsApp Web's own link-preview generator so that any URL typed into a chat compose box is sent via GET to one of three hardcoded third-party servers before WhatsApp's own preview code runs, falling back to WhatsApp's native behavior only if all three requests fail. Separately, the extension's HubSpot CRM sync talks to its own backend using a single hardcoded bearer token shared across every install, with the backend selecting whose contacts, deals, notes and tickets to return based only on a client-supplied phone number rather than a per-user credential.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
Who publishes itak.akshay.agrawal - no other listings under this identity, 2 shared hostnames
ak.akshay.agrawal - no other listings under this identity, 2 shared hostnames
What this publisher told the store about itself, and the other listings that told it the same thing.
Shared hosts - 2 hostnames
Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
What it can do
Permissions this extension asks for, as declared in version 3.0.2. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Read and change your data on whatsapp.com
https://*.whatsapp.com/*
See the address and title of every tab you have open
tabs
Store data in your browser
storage
Act on the current tab, but only after you click the extension
activeTab
Where it sends data
Destinations our analysis observed WA-CRM: Best WA CRM for Business Development and Sales Teams contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- wajsapi.titanchat.com.br
WA-CRM: Best WA CRM for Business Development and Sales Teams sends data to wajsapi.titanchat.com.br. 12 other extensions we have analysed send data here.
- wppc-linkpreview.cloudtrix.com.br
WA-CRM: Best WA CRM for Business Development and Sales Teams sends data to wppc-linkpreview.cloudtrix.com.br. 12 other extensions we have analysed send data here.
- cobrancas.uppermesh.com.br
WA-CRM: Best WA CRM for Business Development and Sales Teams sends data to cobrancas.uppermesh.com.br. 8 other extensions we have analysed send data here.
- wacrm-backend.onrender.com
WA-CRM: Best WA CRM for Business Development and Sales Teams sends data to wacrm-backend.onrender.com. No other extension we have analysed sends data here.