Top Risks

• Search-provider override silently redirects all user queries to ext.ali-bay.com (monetization feed via feed.lookbox.net).
• Privacy policy URL unreachable (fetch_error); effectively no privacy disclosure — scored as no policy.
• Developer is free-webmail Gmail account with no verified identity; brand_mention flags eBay impersonation.
• Extension last updated 40 months ago — abandoned, no security maintenance.
• install_url_hijack=true: extension opens 3rd-party URL on install without disclosure.

Evidence

• search_provider_override manifest chrome_settings_overrides.search_provider is_default=true pointing to ext.ali-bay.com — all searches redirected.
• install_url_hijack manifest install_url_hijack=true; extension opens 3rd-party URL on install.
• privacy_policy_unreachable api Privacy policy fetch failed (ConnectionError); URL https://ali-bay.com/privacy-policy/ is dead — treated as no policy.
• free_webmail_developer store Developer email gingernoland18@gmail.com; no verified publisher; no business domain.
• brand_impersonation store brand_mention: eBay mentioned, confirmed_owner=false, is_impersonation=true; developer domain is gmail.com.
• stale_extension store Last updated April 2023; 40 months since update — zombie tier.
• external_js_hosts crx JS contacts ext.ali-bay.com and feed.lookbox.net; feed.lookbox.net suggests ad/monetization feed.
• search_override_monetization manifest search_url includes /r/?ext=alibay&keyword={searchTerms} — affiliate/ad redirect pattern on ext.ali-bay.com.

Permissions Breakdown

• storage low Standard local data persistence; low risk alone.
• unlimitedStorage low Allows unbounded local storage; minor risk, no host access.
• chrome_settings_overrides.search_provider (is_default:true) medium Overrides default search engine to ext.ali-bay.com, redirecting all queries.

Pillar Scores

Bookkeeping