All network calls in the JavaScript code go exclusively to [domain withheld] (the operator's own logistics platform, declared in apiDomain) and perform legitimate shopping-assistant functions: fetching customer login state, exchange rates, and posting cart additions with product details the user explicitly selected. There is no obfuscation, no credential exfiltration to third parties, no dynamic code loading, and no use of eval(). The two significant contextual red flags — 93% permhash-cluster malicious rate and 100% malicious publisher siblings — are alarming but are not corroborated by the actual code behavior; they likely reflect the model overfitting on the Chinese shopping-site host permissions that this entire category of Vietnamese ordering tools shares. A notable structural discrepancy exists: the bundled manifest is MV2 and lists host_permissions including [domain withheld] and [domain withheld], while the published manifest is MV3 with different host_permissions ([domain withheld], [domain withheld]); this inconsistency is explained by the bundle being version 3.7 analysed here representing an older release than the current live listing.