Chrome Web Store
74Versions
1Code reviewed

No malware found

In code review (v5.0.58)

Our reviewer read version 5.0.58 — the most recent version we have reviewed — and found no malicious behaviour. The version shown here has not been individually reviewed yet.

93 indicators in this extension

93 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

What our analysis found

Email Tracker + Pixelblock Detector & Blocker, used by 300,000 people, showed no malicious code in Extension Auditor's review. Its permissions mean it can read and change data on all websites and can inject scripts into pages. It comes from a trusted publisher and was last updated in September 2026.

Analyst notes

The extension exclusively communicates with the publisher's own domains (emailtracker.website, [domain withheld], [domain withheld], and link-shorteners likely owned by the publisher) for email tracking and pixel blocking. No unauthorized data exfiltration or remote code loading was found. Broad permissions (cookies, scripting, declarativeNetRequest) are necessary for the stated functionality across multiple webmail providers. Error reporting to Rollbar is standard and likely covered by the privacy policy. The ML model and risk engine overfit on permission breadth and DOM manipulation patterns typical of email tracking extensions.

Email Tracker + Pixelblock Detector & Blocker

Email Tracker + Pixelblock Detector & Blocker Chrome extension security report

ID: bnompdfnhdbgdaoanapncknhmckenfog

Supported Languages

🇺🇸English

Extension Info & Metadata

Status
Active
Version
5.0.60
Size
0.48 MB
Rating
4.6/5
Reviews
1,200
Users
300,000
Type
Extension
Updated
Sep 8, 2026
Category
Workflow & planning
Price
Free
Featured
Yes
Visibility
Listed
Mature
No
By Google
No
Trusted
Yes
This publisherTrack record
1extension
All still listed
Scanned by Extension Auditor — Low RiskDevelopers: embed this badge to link to this report.

Publisher Contextual Analysis

Trusted
Author
11669532 Canada Inc.
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
Yes
Mailbox exists
Yes
Extensions
1
Active
1
Obsolete
0
Listed
1
Unlisted
0
Users
300,000

Screenshots & videos

Screenshot 1
Screenshot 2
Screenshot 3
Screenshot 4
Screenshot 5

Install growth

Item
Type
Severity
Description
declarativeNetRequest
Permission
Critical
This permission allows the extension to define rules to block, redirect, or modify network requests. Rated Critical because it can control all network traffic, potentially blocking security updates or redirecting to malicious sites.
declarativeNetRequestWithHostAccess
Permission
Critical
This permission combines network request modification with host permissions. Rated Critical because it can modify requests for specific domains, potentially targeting sensitive websites with precise attack rules.
scripting
Permission
Critical
This permission allows injection and execution of JavaScript on any webpage. Rated Critical because it can modify page content, steal sensitive data, and inject malicious code into any site the extension has access to.
<all_urls>
Host
Critical
Broad host access — the extension can read/modify content on every website.
Dangerous Permission Combination: scripting,<all_urls>,cookies
Risk Factor
Critical
Enables sophisticated data theft through script injection and traffic monitoring
cookies
Permission
High
This permission provides full access to read and modify browser cookies. Rated High because it can steal session tokens, modify authentication cookies, and compromise accounts across websites.
offscreen
Permission
High
This permission creates hidden browser documents with full DOM access. Rated High because it can run background operations invisibly, potentially executing malicious code without user awareness.
webNavigation
Permission
High
This permission enables monitoring of all browser navigation events and transitions. Rated High because it can track every page visit, navigation method, and browsing pattern, potentially exposing sensitive browsing behavior and user activities.
Contextual Risk Factors
Risk Factor
High
The following context increases the overall risk:• 20% increase: Access to sensitive domains increases potential impact• 10% increase: Early script execution enables pre-emptive content manipulation• 25% increase: Unsafe code evaluation capabilities increase attack surface
Broad Host Permissions
Risk Factor
High
This extension has broad host permissions allowing it to access many or all websites.
Broad Content Script Access
Risk Factor
High
This extension can inject scripts into any website.
Unsafe WebAssembly Execution
Risk Factor
High
This extension's CSP allows "wasm-unsafe-eval".
tabs
Permission
Medium
This permission enables tab management and monitoring. Rated Medium because it can track open tabs, access tab metadata, and monitor user browsing patterns.
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
unlimitedStorage
Permission
Medium
This permission removes storage quota restrictions. Rated Medium because it can store large amounts of user data without limits, potentially impacting browser performance and storing extensive tracking data.
declarativeNetRequestFeedback
Permission
Medium
This permission provides network request modification logs. Rated Medium because it can monitor network request changes and debug traffic modifications.
gcm
Permission
Medium
This permission enables Google Cloud Messaging for push notifications. Rated Medium because it can maintain persistent connections, receive external messages, and operate in the background.
Access to Sensitive Domains
Risk Factor
Medium
This extension requests access to sensitive domains: *://*.mail.google.com/*, *://*.inbox.google.com/*, *://*.outlook.live.com/*, *://*.outlook.office.com/*, *://*.outlook.office365.com/*, *://*.outlook.cloud.microsoft/*, *://*.mail.yahoo.com/*
Early Content Script Execution
Risk Factor
Medium
This extension runs content scripts at document_start.
notifications
Permission
Low
This permission displays system notifications. Rated Low because it can only show user-visible notifications without accessing system data.
alarms
Permission
Low
This permission schedules periodic tasks. Rated Low because it can only trigger events at specified times without access to sensitive data.

93 indicators in this extension

93 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

About this extension

Find out if your emails get read + pixelblock. Free & unlimited email tracking for Gmail, Outlook, Hotmail, Office 365 & Yahoo Mail

Read the publisher’s full description

Find out if your emails were read. Simply install and any future emails are automatically tracked. A circle will appear when the tracking is enabled on the sent email and a checkmark will appear when it has been read. Works for unlimited email accounts and sent emails. Works with Gmail, Outlook / Hotmail, Office 365 Outlook, and Yahoo Mail. For compatibility with other email clients contact us at info@emailtracker.website Now with Email Tracker Detector and Blocker (PixelBlock / Ugly Email Privacy Protector). Email Tracker Blocker detects and automatically blocks other email tracking pixels. This prevents others from seeing that you opened their emails. ​Email tracker does not ever store or transfer your email contents in order to ensure your privacy. Emails sent to only yourself are not tracked. If you want to test the extension send an email to another email account. Upgrade to pro and get full statistics, link tracking, and more. Visit https://emailtracker.website/pro For more information or help please visit https://emailtracker.website/help

User reviews

Extension files

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

URLs
93

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found
No IP addresses found

93 indicators in this extension

93 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe
Version
Size
Verdict
Findings
Permhash
5.0.60
Latest
0.48 MBNot scanned—
0c68481bfceee705450ad6e7461f44071a4eef10372c486abd1f10d9609466ec
5.0.59
0.48 MBNot scanned—
616c9ae3c57b71a5f60b49462eaf335e26abd2c0dbde40708cce9c0bf6496adc
5.0.58
0.48 MBNo malware found0
0c68481bfceee705450ad6e7461f44071a4eef10372c486abd1f10d9609466ec
5.0.57
0.48 MBNot scanned—
0c68481bfceee705450ad6e7461f44071a4eef10372c486abd1f10d9609466ec
5.0.56
0.48 MBNot scanned—
0c68481bfceee705450ad6e7461f44071a4eef10372c486abd1f10d9609466ec
5.0.55
0.48 MBNot scanned—
0c68481bfceee705450ad6e7461f44071a4eef10372c486abd1f10d9609466ec
5.0.54
0.48 MBNot scanned—
0c68481bfceee705450ad6e7461f44071a4eef10372c486abd1f10d9609466ec
5.0.53
0.48 MBNot scanned—
0c68481bfceee705450ad6e7461f44071a4eef10372c486abd1f10d9609466ec
5.0.52
0.48 MBNot scanned—
0c68481bfceee705450ad6e7461f44071a4eef10372c486abd1f10d9609466ec
5.0.51
0.48 MBNot scanned—
0c68481bfceee705450ad6e7461f44071a4eef10372c486abd1f10d9609466ec
Showing 1 to 10 of 80 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

Gain full insight into all external connections.

Upgrade for full visibility.