Is Xooma Intelligence Messenger CRM safe?
Xooma Intelligence Messenger CRM sends your Facebook friend list and CRM notes to xiappserver.com.
A content script on facebook.com/friends reads your friends' names, Facebook IDs and profile images, and the background script uploads them to the vendor's backend with a bearer token. Labels, tags, notes, message templates and user-configured webhook payloads use the same API. This is the CRM's sync feature, and the Facebook session token is used only against Facebook endpoints.
Who publishes itXooma Worldwide - 4 other listings from the same operator, 1 of them carrying a finding
Xooma Worldwide - 4 other listings from the same operator, 1 of them carrying a finding
What this publisher told the store about itself, and the other listings that told it the same thing.
Same store account
4 other listings published from this account, 49 users between them. 1 of them carries a finding.
Shared hosts - 1 hostname
Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Where it sends data
Destinations our analysis observed Xooma Intelligence Messenger CRM contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- xiappserver.com
Xooma Intelligence Messenger CRM sends data to xiappserver.com. No other extension we have analysed sends data here.