The Ldi extension is a malicious extension that loads the Coinhive browser miner into a victim’s browser and uses up all the CPU. It also uses that victim’s Gmail account to register free domains for the attackers using Freenom.com. This extension has since been removed from the Chrome Web Store page for this extension. The extension is now available on Google’s Chrome Web Web Store and is no longer available on the Chrome web store page. It is easy to see that malicious extensions are on the rise in malicious behavior.
Source: https://www.bleepingcomputer.com/news/security/chrome-extension-uses-your-gmail-to-register-domains-names-and-injects-coinhive/