Support

Understanding the Dashboard

Traffic tab

Shows every network request made by your browser in real time. The Source column identifies whether the request came from a tab (showing the page title) or an extension (showing the extension name). Use the filters to narrow by protocol, source type, or flag type.

Extensions tab

Lists every installed Chrome extension alongside the number of host domains it declared in its manifest. Extensions shown with <all_urls> in red have declared permission to contact any server on the internet — monitor these closely. The Undeclared column shows how many requests went to servers not listed in the extension's permissions.

Alerts tab

A consolidated list of three types of findings:

• Undeclared requests — an extension contacted a server not listed in its manifest host_permissions
• Unencrypted connections — a request was made over HTTP (plaintext), meaning data was sent without encryption
• Hidden servers — the destination server is behind a CDN or reverse proxy (Cloudflare, CloudFront, Fastly, etc.), so the true origin server is not visible

Popup summary

The toolbar popup shows a quick count of total requests, unencrypted connections, undeclared extension requests, and active extensions since the log was last cleared.

Common Questions

Why does an extension show undeclared requests?

An extension's manifest lists the servers it is allowed to contact. If an extension contacts a server outside that list, it is flagged as undeclared. This may be intentional (a bug in the manifest) or it may indicate unexpected behaviour worth investigating.

Should I be worried about <all_urls> extensions?

<all_urls> means the extension declared permission to contact any server. This is a broad permission — not inherently malicious, but worth monitoring. Browser Sentinel shows you exactly which servers these extensions are actually contacting.

Why are most connections showing as hidden behind CDN?

Most large websites and services (Google, Facebook, news sites, SaaS apps) route their traffic through CDN providers like Cloudflare or Amazon CloudFront. This is normal — it improves performance and security. Hidden simply means the true origin server IP is not directly visible.

The request count is stuck at 800

Browser Sentinel keeps the most recent 800 requests in memory. Older requests are rolled off automatically. Click Clear Log to reset.

The extension stopped logging after leaving it open a while

Chrome may suspend the background service worker when idle. The extension uses an alarm to keep it alive, but if monitoring stops, click the extension icon once to wake it up, or reload via chrome://extensions.

Contact

Email: support@cchk.info

We aim to respond within 48 hours.