This is a legitimate Construct 2-exported HTML5 game extension with zero declared permissions. All JS files are either the standard Construct 2 game engine runtime (, 24k lines), a BroadcastChannel offline-client helper (), game bootstrapping scripts (,), or a simple popup layout script () that uses document.write() to render an iframe and image-map links — all pointing exclusively to the publisher's own domain [domain withheld]. The background service worker () opens a publisher tab on install and sets an uninstall URL, both to [domain withheld]. No data is collected, no external third-party endpoints are contacted, and there is no obfuscation. The ML score is entirely explained by the large Construct 2 game engine inflating js_document_write, js_appendchild, js_createelement_script counters and the high total_js_size_bytes; the third-party score (impact) and Google trusted-publisher badge corroborate the benign reading and directly contradict the ML signal.