Chrome Web Store
260Versions
29Code reviewed

No malware found

In code review (v12.87.0)

Our reviewer read version 12.87.0 — the most recent version we have reviewed — and found no malicious behaviour. The version shown here has not been individually reviewed yet.

85 indicators in this extension

85 indicators
28 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

What our analysis found

Mailtrack® – Email Tracker for Gmail, used by 3,000,000 people, showed no malicious code in Extension Auditor's review. It comes from a trusted publisher and was last updated in October 2026.

Analyst notes

Mailtrack is a well-known, legitimate email-tracking service (3M users, Google-featured, Google-audited per their listing, publisher trust badge). The risk engine's High score (3.43) is entirely explained by permissions and behaviors that are core to the extension's declared purpose: declarativeNetRequestWithHostAccess to tracking pixels in Gmail; XHR monkey-patching in gmail.inject. (lines 5441-5509) intercepts Gmail's own send-confirm responses to record send events — not to exfiltrate email content. All external data destinations are either publisher-owned ([domain withheld], [domain withheld]) or well-known SaaS observability tools (Rollbar for error reporting, Datadog for logging) that are explicitly listed in host_permissions and consistent with CWS-disclosed data collection of 'Personally identifiable information' and 'Personal communications'. The ML model's fromCharCode and eval hits map to standard UTF-8 encoding in a CryptoJS library and Webpack's UMD `Function('return this')()` bootstrap — not intentional obfuscation. The permhash cluster has 0% malware rate across 151 versions.

Mailtrack® – Email Tracker for Gmail

Mailtrack® – Email Tracker for Gmail Chrome extension security report

ID: ndnaehgpjlnokgebbaldlmgkapkpjkkb

Supported Languages

🇪🇹Amharic
🇸🇦Arabic
🇧🇩Bengali
🇧🇷Brazilian Portuguese
🇬🇧British English
🇧🇬Bulgarian
🇪🇸Catalan
🇨🇳Chinese (Simplified)
🇹🇼Chinese (Traditional)
🇭🇷Croatian
🇨🇿Czech
🇩🇰Danish
🇳🇱Dutch
🇺🇸English
🇪🇪Estonian
🇵🇭Filipino
🇫🇮Finnish
🇫🇷French
🇩🇪German
🇬🇷Greek
🇮🇳Gujarati
🇮🇱Hebrew
🇮🇳Hindi
🇭🇺Hungarian
🇮🇩Indonesian
🇮🇹Italian
🇯🇵Japanese
🇮🇳Kannada
🇰🇷Korean
🇲🇽Latin American Spanish
🇱🇻Latvian
🇱🇹Lithuanian
🇲🇾Malay
🇮🇳Malayalam
🇮🇳Marathi
🇳🇴Norwegian
🇮🇷Persian
🇵🇱Polish
🇵🇹Portuguese
🇷🇴Romanian
🇷🇺Russian
🇷🇸Serbian
🇸🇰Slovak
🇸🇮Slovenian
🇪🇸Spanish
🇰🇪Swahili
🇸🇪Swedish
🇮🇳Tamil
🇮🇳Telugu
🇹🇭Thai
🇹🇷Turkish
🇺🇦Ukrainian
🇺🇸US English
🇻🇳Vietnamese

Extension Info & Metadata

Status
Active
Version
12.96.0
Size
3.80 MB
Rating
4.4/5
Reviews
11,800
Users
3,000,000
Type
Extension
Updated
Oct 7, 2026
Category
Communication
Price
Free
Featured
Yes
Visibility
Listed
Mature
No
By Google
No
Trusted
Yes
This publisherTrack record
1extension
All still listed
Scanned by Extension Auditor — Low RiskDevelopers: embed this badge to link to this report.

Publisher Contextual Analysis

Trusted
Author
Mailsuite
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Extensions
1
Active
1
Obsolete
0
Listed
1
Unlisted
0
Users
3,000,000

Email Change History

1 change
Jan 28, 2025
Domain changed

Screenshots & videos

Screenshot 2
Screenshot 3
Screenshot 4
Screenshot 5
Screenshot 6
Screenshot 7
Screenshot 8
Screenshot 9
Screenshot 10
Screenshot 11

Install growth

Item
Type
Severity
Description
declarativeNetRequestWithHostAccess
Permission
Critical
This permission combines network request modification with host permissions. Rated Critical because it can modify requests for specific domains, potentially targeting sensitive websites with precise attack rules.
Contextual Risk Factors
Risk Factor
High
The following context increases the overall risk:• 20% increase: Access to sensitive domains increases potential impact• 10% increase: Early script execution enables pre-emptive content manipulation
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
*://*.mailtrack.io/*
Host
Medium
Host permission — access limited to this URL pattern.
*://mailtrack.io/*
Host
Medium
Host permission — access limited to this URL pattern.
*://*.mailsuite.com/*
Host
Medium
Host permission — access limited to this URL pattern.
*://mailsuite.com/*
Host
Medium
Host permission — access limited to this URL pattern.
https://mail.google.com/*
Host
Medium
Host permission — access limited to this URL pattern.
*://*.googleusercontent.com/*
Host
Medium
Host permission — access limited to this URL pattern.
https://api.rollbar.com/*
Host
Medium
Host permission — access limited to this URL pattern.
https://http-intake.logs.datadoghq.eu/*
Host
Medium
Host permission — access limited to this URL pattern.
https://mrt-attachments-prod.s3.eu-west-1.amazonaws.com/*
Host
Medium
Host permission — access limited to this URL pattern.
https://mt-file-tracking-temp.s3.eu-west-1.amazonaws.com/*
Host
Medium
Host permission — access limited to this URL pattern.
Access to Sensitive Domains
Risk Factor
Medium
This extension requests access to sensitive domains: https://mail.google.com/*, *://*.googleusercontent.com/*, https://mrt-attachments-prod.s3.eu-west-1.amazonaws.com/*, https://mt-file-tracking-temp.s3.eu-west-1.amazonaws.com/*
Early Content Script Execution
Risk Factor
Medium
This extension runs content scripts at document_start.
notifications
Permission
Low
This permission displays system notifications. Rated Low because it can only show user-visible notifications without accessing system data.

85 indicators in this extension

85 indicators
28 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

About this extension

Free, unlimited email tracker for Gmail, trusted by millions. Accurate, reliable, GDPR-compliant, and Google-audited.

Read the publisher’s full description

What Makes Mailtrack® Different from Other Email Trackers? ➤The Most Accurate and Reliable Email Tracker Mailtrack eliminates false self-opens and accurately tracks individual opens in group emails, so you know exactly who is engaging with your messages. ➤Avoid Your Emails Landing in the Spam Folder Mailtrack sends emails directly from your personal Gmail account, using Gmail's trusted infrastructure. No external servers, no red flags—minimizing the risk of your emails being marked as spam. ➤Individually Track Recipients in Group Emails In group emails, traditional email trackers only tell you if an email was opened, but not by whom. Mailtrack tracks each recipient individually helping you follow up more effectively based on their engagement. ➤Receive Real-Time Follow-Up Alerts Automatically Get Open Spike Alerts for multiple opens and Revival Alerts for old emails reopened, so you can identify strong interest and re-engage at the right moment. You'll also receive No-Reply Alerts if an email goes unanswered for 24–48 hours. ➤Privacy First. We Never Access or Sell Personal Data Mailtrack never stores your emails. We do not sell, rent, or share your emails, browsing information, or personal data. Your information is fully protected, and we comply with GDPR. ➤Secure and Legal with Encrypted Protection We undergo annual Google audits, are ISO (Information Security Management) certified, and recognized as a Google Cloud Partner. Our system employs 256-bit Advanced Encryption Standard (AES-256) for top-tier security. Key Features that make Mailtrack the Best Email Tracker for Gmail ✔️Individual tracking in group emails: Know who opened your emails when sent to multiple recipients. ✔️Full email tracking history: See exactly when and how many times your emails have been opened. ✔️Real-time email open tracking and notifications ✔️Follow-up alerts: Get notified if your email isn’t opened or replied to within 24–72 hours. ✔️Link click tracking ✔️False open avoidance: Emails sent to yourself aren’t tracked. ✔️Fully integrated Gmail email tracker: Mailtrack works directly within your Gmail, allowing you to keep your email habits unchanged Follow up at the perfect moment with Mailtrack’s real-time email tracker—know instantly when a prospect opens your email! How to track your email with Mailtrack 1. Install the Mailtrack email tracker extension. 2. Send an email as usual. 3. Go to your Sent folder and check if your email has been opened: one check mark means unread, two check marks mean read. Simple! Is Mailtrack safe and legal? Yes. Mailtrack is completely safe. Mailtrack’s email tracker is fully compliant with GDPR, the European Union’s rigorous regulations for safeguarding privacy. In addition, Mailtrack securely encrypts all of your data. ✅GDPR Compliant ✅Audited by Google ✅ISO (Information Security Management) Certified ✅256-bit Advanced Encryption Standard (AES-256) Unlock powerful advanced email tracking features to strengthen client relationships and close more deals! 🏅Integrate with Salesforce™, your CRM, or 4,000+ other apps through Zapier 🏅Excellent reviews: 4.4 stars from over 11,000 reviews 🏅Featured in Forbes, Mashable, Inc, Lifehacker, and more Need help? FAQ: https://mailsuite.com/hc/en-us Learn more: https://mailsuite.com/en/ Plans and Pricing: https://mailsuite.com/en/pricing Terms: https://mailsuite.com/en/terms Privacy Policy: https://mailsuite.com/en/privacy-and-security-center ---------------------------------------------------- PRIVACY, SAFETY AND AUDIT Mailsuite® processes personal data in accordance with European Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016. Mailsuite®’s Privacy Policy and Terms of Use comply fully with GDPR, which is the strictest privacy and security law in the world. Mailsuite® passes an audit by Google™ every year to ensure optimal security. ----------------------------------------------------

User reviews

Extension files

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

URLs
85

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found
No IP addresses found

85 indicators in this extension

85 indicators
28 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe
Version
Size
Verdict
Findings
Permhash
12.96.0
Latest
3.80 MBNot scanned—
713d7de3f854eced53f23f97ccf0498163600d7e792e5a5d26e0a4e86abbe8b0
12.95.1
3.72 MBNot scanned—
713d7de3f854eced53f23f97ccf0498163600d7e792e5a5d26e0a4e86abbe8b0
12.95.0
3.65 MBNot scanned—
713d7de3f854eced53f23f97ccf0498163600d7e792e5a5d26e0a4e86abbe8b0
12.94.2
3.62 MBNot scanned—
713d7de3f854eced53f23f97ccf0498163600d7e792e5a5d26e0a4e86abbe8b0
12.94.1
3.62 MBNot scanned—
713d7de3f854eced53f23f97ccf0498163600d7e792e5a5d26e0a4e86abbe8b0
12.94.0
3.54 MBNot scanned—
713d7de3f854eced53f23f97ccf0498163600d7e792e5a5d26e0a4e86abbe8b0
12.93.0
3.45 MBNot scanned—
713d7de3f854eced53f23f97ccf0498163600d7e792e5a5d26e0a4e86abbe8b0
12.92.0
3.42 MBNot scanned—
713d7de3f854eced53f23f97ccf0498163600d7e792e5a5d26e0a4e86abbe8b0
12.91.0
3.50 MBNot scanned—
713d7de3f854eced53f23f97ccf0498163600d7e792e5a5d26e0a4e86abbe8b0
12.90.0
3.12 MBNot scanned—
713d7de3f854eced53f23f97ccf0498163600d7e792e5a5d26e0a4e86abbe8b0
Showing 1 to 10 of 260 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

Gain full insight into all external connections.

Upgrade for full visibility.