Top Risks

• Default search override routes all queries through track.tlg.pm → redirects to hovbi.com (ad-tech); confirmed not a direct search provider.
• Brand impersonation: claims affiliation with Telegram (confirmed_owner=false); developer domain looks_throwaway.
• Privacy policy is Google's generic policy — not scoped to this extension; data_collection and third_party_sharing admitted without extension-specific disclosure.
• No developer name listed; verified_publisher badge present but domain looks_throwaway per threat_intel.
• External JS host track.srchbid.com is a search-bid/ad-tech domain injected via search URL.

Evidence

• search_redirect_non_direct api search_redirect_probe: final_host=track.tlg.pm, redirect_host=hovbi.com, is_direct_provider=false — ad-tech redirect confirmed.
• search_provider_override manifest chrome_settings_overrides sets default search to https://track.tlg.pm/link?z=157721&refid={searchTerms}.
• newtab_override manifest chrome_url_overrides.newtab = newtab.html; replaces new-tab for all users.
• brand_impersonation store brand_mention: Telegram mentioned, confirmed_owner=false, is_impersonation=true.
• generic_privacy_policy api Privacy policy URL is Google's account policy; scope_extension=false, data_collection=true, third_party_sharing=true.
• throwaway_domain api threat_intel.developer_domain_info.looks_throwaway=true for tlg.pm.
• external_adtech_host crx js_external_hosts includes track.srchbid.com — known search-bid ad-tech domain.
• no_developer_name store developer_name is empty string; no identifiable publisher beyond email contact@tlg.pm.

Permissions Breakdown

• storage low Stores local extension state; low impact alone.
• tabs medium Can read tab URLs/titles; combined with newtab override increases exposure.
• chrome_url_overrides.newtab medium Replaces new-tab page; high visibility, enables search monetization.
• chrome_settings_overrides.search_provider (is_default=true) high Sets default search to track.tlg.pm redirect; routes all queries through ad-tech.

Pillar Scores

Bookkeeping