This is a legitimate HTML5 soccer game built with the Construct 2 game engine, packaged as a Chrome extension by publisher [domain withheld]. The extension declares zero permissions in its manifest, all network activity is either: (a) redirects to [domain withheld] (the publisher's own domain), or (b) the standard Construct 2 offline service worker caching game assets — both entirely benign. The ML score of 0.40 is a false positive driven by (~25,000 lines of minified Construct 2 engine code) inflating js_exclamation, total_js_size_bytes, eval, and XHR counters; and using document.write for static popup layout linking only to [domain withheld]. Third-party score corroborates: impact= (no permissions), and the flagged likelihood signals are metadata-only issues (URL validity), not behavioral. Publisher holds Google trusted badge, featured CWS listing, and a valid email domain.