Top Risks

• Uninstall AND install URL hijack to gameograf.com ad-tech domain with UTM tracking — classic traffic monetization shell.
• Privacy policy is Google's own policy (scope_extension=false, data_collection=true, third_party_sharing=true) — generic policy admitting data sharing; triggers +10.0.
• Operator cluster: 3 sibling extensions under same fingerprint across 12 shared install/uninstall URLs — coordinated NewTab network.
• NewTab override + search permission with no CSP: broad capability for ad/search injection on every new tab opened.
• No developer name listed; JS contacts gameograf.com, Instagram, Netflix, YouTube, X — multi-origin reach beyond stated wallpaper function.

Evidence

• install_url_hijack manifest onInstalled opens https://gameograf.com/?utm_source=ovkas — ad-tech redirect on install.
• uninstall_url_hijack manifest setUninstallURL points to https://gameograf.com/?utm_source=ovkas — ad-tech redirect on uninstall.
• operator_cluster store 3 compound siblings; 12 extensions share same install/uninstall URL — coordinated monetization network.
• privacy_policy_generic api Policy is Google's own privacy page: scope_extension=false, data_collection=true, third_party_sharing=true.
• newtab_override manifest chrome_url_overrides.newtab replaces every new tab; paired with search permission enables search hijacking.
• js_external_hosts crx Extension contacts gameograf.com, instagram.com, netflix.com, youtube.com, x.com — far beyond wallpaper scope.
• no_developer_name store developer_name is empty string; reduces accountability.
• csp_absent manifest content_security_policy is null; no script-src restrictions on MV3 extension.

Permissions Breakdown

• search medium Allows manipulation of the default search provider; paired with NewTab override this enables search hijacking.
• chrome_url_overrides.newtab medium Replaces every new-tab page; core vector for traffic monetization and ad injection.

Pillar Scores

Operator Siblings (4)

Other extensions sharing this developer's compound fingerprint:

• hbcoidfefbocofajncopoidcoeedahbm
• aijplginpngbkakdlhnjjgmigncndbed
• ceaebmnkmaofbkkgilgmikncajiiohec
• gdmbnkaaajldcmamodnkchdbnfonpjbb

Bookkeeping