Lo-Fi Music Room
amfeinhgbpnnjihjiomibeodnainnjkd
Risk Score
4.96
Risk Level:
Medium
Recommendation:
🟡 MEDIUM RISK — review
Top Risks
- NewTab override combined with search permission — classic monetization/search-redirect shell pattern.
- Both install and uninstall URL hijacks redirect to gameograf.com UTM-tagged URLs.
- Operator cluster: 5 compound siblings (21 by dev email), indicating factory-produced extension pattern.
- Privacy policy URL unreachable (fetch error) — effectively no privacy disclosure for users.
- No developer name listed; extension texts are i18n stubs (__MSG_appName__), low transparency.
Evidence
- newtab_override manifest chrome_url_overrides.newtab set to newtab.html — hijacks every new tab.
- install_uninstall_url_hijack manifest Both onInstalled and uninstall redirect to https://gameograf.com/?utm_source=extension&utm_medium=install.
- operator_cluster api sibling_count=5 compound, 21 by dev_email under support@gameograf.com — factory pattern.
- privacy_policy_unreachable api Privacy policy fetch failed (ConnectionError); policy is effectively absent for scoring.
- no_developer_name store developer_name is empty string; reduced accountability.
- search_permission_newtab manifest search permission + newtab override = monetization/search-redirect capability.
- domain_age api gameograf.com first cert 2021-02-03, age ~2050 days, 265 certs — established domain.
- verified_publisher store Verified publisher badge present for gameograf.com domain.
Permissions Breakdown
- search medium Allows querying/overriding search; medium risk on its own.
- host_permissions:https://api.gameograf.com/* low Scoped to developer's own API domain; bounded scope.
- chrome_url_overrides:newtab medium Replaces new tab; high-value real estate for monetization/search redirect.
Pillar Scores
Permissions3.50
Reputation4.50
Network2.00
Webstore8.50
Maintenance1.50
Privacy10.00
Code Quality0.00
CVE Exposure0.00
Operator Siblings (15)
Other extensions sharing this developer's compound fingerprint:
- fdjpcjggpgdmdikmhoagohakklihimbo
- ammndifopdgpjcpmpbdenfcafipnejlj
- ojhigfemmjpjnmhidflhdlcahgdiiija
- ieocbmlfbinpcffofcjmpbjokkfghodc
- faaegcmakhlmoheamicddkfcmmjoljnd
- ceoamfmlgefiljnligpdkdindckojbim
- hlacaekdajdgiiofjplpofbgebgjbnco
- lcoeefcacppckhidgmkdlnbeajkmeick
- kngkldhmcncemclgjgbbogplfeoppkll
- gfcbimjpmoeofbmnjedjfkemdinagkmp
- kmjgnidfglamdnllpoidpfikcodjapih
- heakmhbelclpalglpiceoocofnkcjefb
- gbeldgdcloiceglhpdnkhbafeoddjehm
- epjpkhahnajkdjjfkeadcgfmfjfgdohf
- fjmlhfejlohohljeioedcliggbfkihdf
Bookkeeping
Rubric v3.6
Scored at 2026-09-15 17:46
Listing SHA
771b9928fc0e…
Force block
— not fired
Score recovered
no
Elapsed
—