Confirmed phishing extension. It harvests email credentials and uses them to compromise linked accounts — banking, shopping, crypto. Took everything from my PayPal and Amazon accounts. Report now, before others suffer!