Top Risks

• proxy permission allows full rerouting of all browser traffic through stealthpath.space (RU-hosted, unknown operator).
• Developer is free-webmail (gmail) with no developer name, no business identity, no verified publisher.
• Privacy policy is Google's own account policy — completely unscoped to this extension; admits data collection and 3rd-party sharing.
• Install-URL hijack opens stealthpath.space on install — monetization/tracking signal from an unidentifiable operator.
• No CSP declared on MV3 extension contacting a Russia-geolocated proxy endpoint with no audit trail.

Evidence

• proxy_permission manifest proxy declared — reroutes all browser traffic; combined with stealthpath.space host, traffic destination is unverifiable.
• install_url_hijack crx onInstalled opens https://stealthpath.space/ — monetization/tracking signal, unrecognized operator domain.
• free_webmail_no_dev_name store Developer silviaferr79@gmail.com, no developer name set. Classic low-accountability fingerprint.
• privacy_policy_generic_google store Policy URL is Google account policy (scope_extension=false, data_collection=true, third_party_sharing=true). Score: +10.0.
• stealthpath_ru_geolocation api host_geo_diversity includes RU for stealthpath.space — Russian-geolocated proxy backend for unverified VPN extension.
• no_csp manifest csp_present=false on MV3 extension. No content_security_policy declared.
• no_verified_publisher_featured store verified_publisher=false, is_featured_by_google=false. No trust anchors.
• cve_findings_empty crx No CVEs detected in bundled JS libraries. CVE pillar = 0.0.

Permissions Breakdown

• proxy high Full proxy control — can reroute all browser traffic through attacker-controlled servers.
• https://stealthpath.space/* high Unknown third-party domain (RU-geolocated) receiving proxy configuration and install-redirect traffic.
• https://cloudflare-dns.com/* low Known public DNS-over-HTTPS resolver; used for DNS resolution in VPN context.
• https://dns.google/* low Known public DNS-over-HTTPS resolver; routine for VPN DNS leak prevention.

Pillar Scores

Bookkeeping