Top Risks

• THREAT FEED: extension ID independently confirmed malicious by TPCI chrome-mal-ids — Minimalist Tab [browser-hijack] + malext.io malicious_extension_sentry (+2.5, capped).
• Search provider overridden to ad-block-pro.co/rdr.html — confirmed non-direct search redirector hijacking all user queries.
• Developer email is free-webmail (gmail) with no developer name; privacy policy on unrelated ad-block-pro.co domain.
• Extension is 32 months stale — well past 24-month zombie threshold; abandoned or awaiting supply-chain sale.
• New-tab override combined with search hijack is a textbook monetization shell; triple-stale fingerprint (>24mo, MV3, newtab+search).

Evidence

• search_provider_override manifest chrome_settings_overrides sets default search to https://ad-block-pro.co/rdr.html?keyword={searchTerms}; is_default=true.
• search_redirect_probe api is_direct_provider=false; search resolves on ad-block-pro.co — confirmed redirect intermediary.
• newtab_override manifest chrome_url_overrides.newtab = newTab.html; hijacks new-tab page for every browser open.
• stale_extension store Last updated January 28, 2024; 32 months since update — zombie threshold exceeded.
• free_webmail_developer store Developer email info.priomedia@gmail.com; no developer name; no business domain.
• privacy_policy_inadequate api Policy length 444 chars; scope_extension=false; third_party_silence=true; does not cover this extension.
• verified_publisher store verified_publisher=true; however 0c cap applies: >18mo stale, so discount capped at -1.0.
• low_rating store Rating 3.2; below 4.0 threshold; user dissatisfaction consistent with redirect monetization.
• threat_feed_membership api Extension ID listed by TPCI chrome-mal-ids — Minimalist Tab [browser-hijack] + malext.io malicious_extension_sentry; score 6.64 -> 9.14 (+2.5 cap 2.5).

Permissions Breakdown

• storage low Stores local preferences; minimal risk on its own.
• chrome_url_overrides.newtab medium Replaces new-tab page; high-visibility real estate for monetization.
• chrome_settings_overrides.search_provider high Sets default search to ad-block-pro.co redirector; classic search hijack pattern.

Pillar Scores

Bookkeeping