Top Risks

• Uninstall and install URL hijack both redirect to gameograf.com — clear monetization/traffic-arbitrage shell.
• NewTab override with 'search' permission: controls every new tab and intercepts searches.
• Privacy policy URL returns fetch error (not accessible); treated as no policy — full 10.0 privacy score.
• Free-webmail developer (gmail), no developer name, verified_publisher claimed but unverifiable domain.
• JS contacts gameograf.com, instagram.com, netflix.com, youtube.com, x.com — broad unsolicited reach for a wallpaper.

Evidence

• uninstall_url_hijack crx setUninstallURL targets gameograf.com with UTM tags — traffic monetization on uninstall.
• install_url_hijack crx onInstalled opens gameograf.com with UTM tags — monetization on install.
• newtab_override manifest chrome_url_overrides.newtab = index.html; every new tab hijacked by this extension.
• js_external_hosts crx Wallpaper extension contacts gameograf.com, instagram.com, netflix.com, youtube.com, x.com — unjustified.
• privacy_policy_fetch_error api privacy_policy_classification.fetched==false (HTTPError); policy inaccessible, treated as absent.
• free_webmail_dev_no_name store Developer email halilseker3455@gmail.com; developer_name empty; no verified business identity.
• new_tab_monetization_shape manifest NewTab override + search permission + dual URL hijack = textbook monetization shell pattern.
• verified_publisher_claimed store verified_publisher==true but dev domain is gmail.com; invariant 0c caps discount to -1.0 due to no resolving domain.

Permissions Breakdown

• search medium Allows querying browser search API; paired with NewTab override, enables search hijacking.
• chrome_url_overrides.newtab high Replaces every new tab; prime real estate for monetization and user tracking.

Pillar Scores

Bookkeeping