Portugal National Team – FIFA World Cup 2026 Squad Top 20 Wallpapers
Marketplace listing not found
Our last marketplace check could not find this listing in Chrome Web Store. It may have been removed or delisted. Existing installs may still run, but verify the publisher and package source before installing or updating.
From the RiskyPlugins AI security review of the observed evidence.
Analysis record
- Analysed
- 4 months ago
- Version
- v4.9
- Artifact
- SHA256 C05…BE6
- Source
- Findings (non-IoC)
Network indicator detail is shown below
841 aggregate findings were counted. 841 network indicators contributed to the aggregate finding count.
Network Indicators
Concrete URLs, domains, IPs, emails, and hashes extracted from the analyzed artifact.
Loading network indicators
IoC detail rows are loaded outside the initial page render.
Publisher Evidence
Limited evidencePublisher identity, store signals, distribution reach, and warning signals used for context. Treat this as supporting evidence, not a clean bill of health.
Chrome does not expose the same publisher verification data as IDE stores, so this score is deliberately conservative.
12 evidence rows available.
Finding Categories
Requested Permissions
4 permissionsAI Security Report
AI Security Review
Evidence context: threat category adware; evidence quality moderate.
This extension claims to provide Portugal National Team wallpapers for the 2026 FIFA World Cup but exhibits concerning static domain references that do not align with its stated purpose. A legitimate wallpaper extension should only require Google infrastructure domains or image hosting services, yet the static analysis extracted 918 domain IoCs from the code.
The most significant finding is the presence of suspicious short domains including m.top, d.dot, d.zero, e.cw, b.cw, h.zero, l.black, e.world, f.zero, e.center, and e.one. These domains follow a pattern common to ad injection networks, redirect services, or monetization infrastructure—not wallpaper delivery. The domain jqueryui.com is legitimate (a jQuery UI library), but the other domains have no legitimate reason to appear in a static wallpaper extension.
The extension is published by an anonymous Gmail address ([email protected]) with only 44 users, which is typical for low-quality PUPs. There are no malware signatures, no obfuscation findings, and no code-smell detections, which rules out confirmed_malicious classification. However, the presence of these suspicious domains in the codebase strongly suggests the extension may inject ads, redirect traffic, or serve as a carrier for monetization infrastructure.
The strongest counterargument is that these 918 IoCs could be false positives from bundled dependencies or static extraction artifacts. This is partially valid—the IoC extractor does produce noise, and there are no dynamic network findings showing actual traffic to these domains. However, the specific domain names themselves (not their count) are the evidence: legitimate wallpaper extensions do not reference e.cw, l.black, or d.zero. Even if some IoCs are false positives, the pattern of short, generic domains is characteristic of adware/PUP infrastructure. The absence of malware signatures means this is not active malware, but the domain references warrant a confirmed_risk verdict due to potential adware behavior.
Key Reasons
- Suspicious short domains (m.top, d.dot, e.cw, etc.) inconsistent with wallpaper extension functionality
- 918 static domain IoCs extracted from code without malware signatures
- Anonymous Gmail publisher with low user count (44)
- No obfuscation or malware signatures detected
False Positive Considerations
- Static IoC extraction may include unused or dead code references
- No dynamic network behavior confirmed to these domains
Reviewed 2026-06-06; recommended action: monitor; model confidence 75%.
Chrome version history
Risk trend by version
2 analyzed versions. Each point is the latest successful scan for that version; failed zero-score scans are hidden. Dates are based on first seen by risky plugins.
Pick any point on the chart to explore that version's code below.
Source Code Not Available
Source code is not available for this version of the extension.
About This Extension
Frequently Asked Questions
Similar Extensions
Related extensions from the same publisher or marketplace
Michael Jackson Angel of Moonlight Live Wallpaper
[email protected]
Roronoa Zoro 4K Ultra HD 15 Wallpaper
[email protected]
Akaza 4K Ultra HD 15 Wallpaper
[email protected]
Monkey D. Luffy 4K Ultra HD 15 Wallpaper
[email protected]
Spain National Team – FIFA World Cup 2026 USA Squad | Top 20 Wallpaper
[email protected]
Super Sports Car 4K Ultra HD 15 Wallpapers
[email protected]