Chrome Web Store
7Versions
1Code reviewed

No malware found

In code review (v0.0.1.0)

Our reviewer read version 0.0.1.0 — the most recent version we have reviewed — and found no malicious behaviour. The version shown here has not been individually reviewed yet.

10 indicators in this extension

10 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

What our analysis found

Proctortrack One v3, used by 40,000 people, showed no malicious code in Extension Auditor's review. Our code review reported 2 findings (2 medium), led by other. Its permissions mean it can read and change data on all websites and can observe network requests.

Key findings

  • Medium

    Other

    The externally_connectable declaration uses ids: ["*"], allowing any installed Chrome extension (not just a specific companion extension) to send runtime messages to this extension. Given that this extension holds webRequest, proxy, cookies, and desktopCapture permissions, a malicious co-installed extension could potentially invoke its message handlers to trigger screen captures or other sensitive operations. A tighter allowlist of known companion extension IDs would be safer.

  • Medium

    Other

    The CWS live listing declares [domain withheld] as a host_permission but the bundled does not include this entry. This mismatch means the live Chrome Web Store listing exposes broader host access than the shipped package. While this may reflect a pending update, it is a discrepancy worth noting; [domain withheld]'s relationship to is unclear from the source code.

Analyst notes

Proctortrack One v3 is a remote exam proctoring extension from Verificient Technologies ([domain withheld]), a legitimate US company. All observed behaviors — screen capture, webcam recording, browser lockdown ( blocking, full-screen enforcement), on-device CV violation detection via models, and data upload to [domain withheld] via pre-signed URLs obtained from [domain withheld] backends — are fully consistent with its stated purpose and CWS-disclosed data collection (PII, location, user activity). The ML score of 0.38 is driven by large bundle size (16.9MB webpack bundle with Lit framework), broad proctoring permissions, and high counts from the Lit web components framework — not evidence of malice. The permhash cluster has only flagged (14%), and the third-party score rates likelihood The service worker is absent from the analysis bundle, which prevents full verification of usage; this limits confidence to medium but the content scripts show no unauthorized exfiltration.

Proctortrack One v3

Proctortrack One v3 Chrome extension security report

ID: angpjceilobeojeaomilenbjdjdnffkn

Supported Languages

🇺🇸US English

Extension Info & Metadata

Status
Active
Version
0.0.2.8
Size
32.91 MB
Rating
1.7/5
Reviews
4
Users
40,000
Type
Extension
Updated
Jul 22, 2026
Category
Workflow & planning
Price
Free
Featured
No
Visibility
Listed
Mature
No
By Google
No
Trusted
No
This publisherTrack record
2extensions
1 no longer listed
Scanned by Extension Auditor — Low RiskDevelopers: embed this badge to link to this report.

Publisher Contextual Analysis

Author
Verificient Technologies, Inc
Country
US
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Address
1250 Broadway 36th floor New York, NY 10001 US
Website
Visit
Extensions
2
Active
1
Obsolete
1
Listed
1
Unlisted
1
Users
140,000

Screenshots & videos

Screenshot 1
Screenshot 2

Install growth

Item
Type
Severity
Description
webRequest
Permission
Critical
This permission enables the extension to monitor and analyze all web requests made by the browser. Rated Critical because it can observe all network traffic including sensitive data, track browsing behavior, and gather authentication tokens.
proxy
Permission
Critical
This permission allows the extension to control the browser's proxy settings. Rated Critical because it can route all traffic through potentially malicious proxies, enabling man-in-the-middle attacks and traffic monitoring.
webRequestAuthProvider
Permission
Critical
This permission allows the extension to handle authentication requests and modify authentication headers. Rated Critical because it can intercept login credentials, session tokens, and modify authentication flows to compromise accounts.
<all_urls>
Host
Critical
Broad host access — the extension can read/modify content on every website.
desktopCapture
Permission
High
This permission captures content from your desktop screens. Rated High because it can record sensitive information from any window, capture passwords, and monitor user activity.
cookies
Permission
High
This permission provides full access to read and modify browser cookies. Rated High because it can steal session tokens, modify authentication cookies, and compromise accounts across websites.
browsingData
Permission
High
This permission clears browsing data, history, and redis. Rated High because it can destroy evidence of malicious activity, clear security logs, and modify browser state.
Contextual Risk Factors
Risk Factor
High
The following context increases the overall risk:• 20% increase: Access to sensitive domains increases potential impact
Broad Host Permissions
Risk Factor
High
This extension has broad host permissions allowing it to access many or all websites.
tabs
Permission
Medium
This permission enables tab management and monitoring. Rated Medium because it can track open tabs, access tab metadata, and monitor user browsing patterns.
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
system.cpu
Permission
Medium
This permission provides access to CPU usage and information. Rated Medium because it can monitor system performance, detect other applications, and potentially identify user activities.
system.memory
Permission
Medium
This permission accesses system memory information. Rated Medium because it can monitor memory usage patterns, detect other applications, and gather system state information.
https://*.verificient.com/*
Host
Medium
Host permission — access limited to this URL pattern.
https://*.instructure.com/*
Host
Medium
Host permission — access limited to this URL pattern.
*://*.lti-inc.net/*
Host
Medium
Host permission — access limited to this URL pattern.
*://*.actfltesting.org/*
Host
Medium
Host permission — access limited to this URL pattern.
*://*.languagetesting.com/*
Host
Medium
Host permission — access limited to this URL pattern.
*://*.orea.com/*
Host
Medium
Host permission — access limited to this URL pattern.
https://*.accuplacer.org/*
Host
Medium
Host permission — access limited to this URL pattern.
https://api.ipify.org/
Host
Medium
Host permission — access limited to this URL pattern.
*://*.ca.gov/*
Host
Medium
Host permission — access limited to this URL pattern.
*://165.153.102.109/*
Host
Medium
Host permission — access limited to this URL pattern.
*://107.162.177.69/*
Host
Medium
Host permission — access limited to this URL pattern.
https://*.dmv.ca.gov/*
Host
Medium
Host permission — access limited to this URL pattern.
https://*.kaptest.com/*
Host
Medium
Host permission — access limited to this URL pattern.
https://*.kaplan.com/*
Host
Medium
Host permission — access limited to this URL pattern.
https://app.xpresslab.com/*
Host
Medium
Host permission — access limited to this URL pattern.
https://relevel.com/*
Host
Medium
Host permission — access limited to this URL pattern.
https://*.relevel.com/*
Host
Medium
Host permission — access limited to this URL pattern.
https://*.amazonaws.com/*
Host
Medium
Host permission — access limited to this URL pattern.
https://*.cloudloka.com/*
Host
Medium
Host permission — access limited to this URL pattern.
Access to Sensitive Domains
Risk Factor
Medium
This extension requests access to sensitive domains: *://*.actfltesting.org/*, *://*.languagetesting.com/*, https://*.amazonaws.com/*
alarms
Permission
Low
This permission schedules periodic tasks. Rated Low because it can only trigger events at specified times without access to sensitive data.
system.display
Permission
Low
This permission reads display configuration. Rated Low because it only accesses screen properties without content access.

10 indicators in this extension

10 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

About this extension

The Proctortrack One is a custom chrome extension designed to facilitate an easy, secure, private and non-intrusive experience for…

Read the publisher’s full description

The Proctortrack One is a custom chrome extension designed to facilitate an easy, secure, private and non-intrusive experience for taking remote proctoring exams sponsored by your College/University/Institution. Proctortrack One Extension prevents unauthorized remote access, proctor tester behavior and verify remote compliance with test rules via secure screen sharing and using your webcam. Before starting the test, the test taker has to allow webcam capture and screen capturing so that the system can check for any kind of violations by the test taker while attempting the test. After you complete your test/exam, test takers should follow steps to return to this page and uninstall the plugin as the final step in your testing process.

User reviews

Extension files

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

URLs
10

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found
No IP addresses found

10 indicators in this extension

10 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe
Version
Size
Verdict
Findings
Permhash
0.0.2.8
Latest
32.91 MBNot scanned—
d09e49e2066a0c90fae58e88714913698522c6935a870080816d9477b6df9c00
0.0.2.6
32.65 MBNot scanned—
d09e49e2066a0c90fae58e88714913698522c6935a870080816d9477b6df9c00
0.0.2.3
32.62 MBNot scanned—
d09e49e2066a0c90fae58e88714913698522c6935a870080816d9477b6df9c00
0.0.2.2
32.62 MBNot scanned—
d09e49e2066a0c90fae58e88714913698522c6935a870080816d9477b6df9c00
0.0.2.1
32.62 MBNot scanned—
d09e49e2066a0c90fae58e88714913698522c6935a870080816d9477b6df9c00
0.0.1.0
18.52 MBNo malware found0
d09e49e2066a0c90fae58e88714913698522c6935a870080816d9477b6df9c00
0.0.2.7
32.66 MBNot scanned—
d09e49e2066a0c90fae58e88714913698522c6935a870080816d9477b6df9c00
Showing 1 to 7 of 10 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

Gain full insight into all external connections.

Upgrade for full visibility.

More from Verificient Technologies, Inc