Netskope Extension Risk

Detail view · rubric v3.6
← Back to catalog

Lo-Fi Music Room

amfeinhgbpnnjihjiomibeodnainnjkd
Risk Score
4.96
Risk Level: Medium
Recommendation: 🟡 MEDIUM RISK — review
Category NewTab
Installs 24
Rating
Last updated 2026-05-04 (4 months ago)
Manifest version MV3
CSP present ❌ no
Developer support@gameograf.com
Verified publisher ✅ yes
Featured by Google ❌ no
Privacy policy link
Web Store open ↗

Top Risks

  • NewTab override combined with search permission — classic monetization/search-redirect shell pattern.
  • Both install and uninstall URL hijacks redirect to gameograf.com UTM-tagged URLs.
  • Operator cluster: 5 compound siblings (21 by dev email), indicating factory-produced extension pattern.
  • Privacy policy URL unreachable (fetch error) — effectively no privacy disclosure for users.
  • No developer name listed; extension texts are i18n stubs (__MSG_appName__), low transparency.

Evidence

  • newtab_override manifest chrome_url_overrides.newtab set to newtab.html — hijacks every new tab.
  • install_uninstall_url_hijack manifest Both onInstalled and uninstall redirect to https://gameograf.com/?utm_source=extension&utm_medium=install.
  • operator_cluster api sibling_count=5 compound, 21 by dev_email under support@gameograf.com — factory pattern.
  • privacy_policy_unreachable api Privacy policy fetch failed (ConnectionError); policy is effectively absent for scoring.
  • no_developer_name store developer_name is empty string; reduced accountability.
  • search_permission_newtab manifest search permission + newtab override = monetization/search-redirect capability.
  • domain_age api gameograf.com first cert 2021-02-03, age ~2050 days, 265 certs — established domain.
  • verified_publisher store Verified publisher badge present for gameograf.com domain.

Permissions Breakdown

  • search medium Allows querying/overriding search; medium risk on its own.
  • host_permissions:https://api.gameograf.com/* low Scoped to developer's own API domain; bounded scope.
  • chrome_url_overrides:newtab medium Replaces new tab; high-value real estate for monetization/search redirect.

Pillar Scores

Permissions3.50
Reputation4.50
Network2.00
Webstore8.50
Maintenance1.50
Privacy10.00
Code Quality0.00
CVE Exposure0.00

Bookkeeping

Rubric v3.6
Scored at 2026-09-15 17:46
Listing SHA 771b9928fc0e…
Force block — not fired
Score recovered no
Elapsed