Top Risks

• Uninstall and install URL both hijacked to gameograf.com — clear monetization shell pattern.
• Privacy policy is Google's generic account policy; does not scope to this extension, but admits data collection and 3rd-party sharing → +10.0 privacy.
• NewTab override + 'search' permission enables search-result monetization on every new tab.
• Free-webmail developer (gmail) with no business website, not verified or featured → high reputation risk.
• Extension contacts gameograf.com, Instagram, Netflix, YouTube, X.com — broad unrelated external host surface.

Evidence

• install_url_hijack manifest onInstalled opens gameograf.com with UTM tracking — classic monetization shell.
• uninstall_url_hijack manifest setUninstallURL targets gameograf.com with UTM params — Webstore +3.0 each.
• newtab_override manifest chrome_url_overrides.newtab replaces every new tab; combined with search permission.
• generic_privacy_policy store Policy is Google account policy (scope_extension=false, data_collection=true, 3rd-party=true) → Privacy +10.0.
• free_webmail_developer store Developer email birolkaya63536@gmail.com; no verified publisher, no business domain.
• js_external_hosts crx 6 external hosts: gameograf.com, google.com, instagram.com, netflix.com, youtube.com, x.com — unrelated to wallpaper.
• no_csp manifest csp_present=false on MV3; +2.0 network per v2 calibration fix (b).
• new_tab_monetization_pattern store NewTab override + install/uninstall hijack + UTM-tagged gameograf.com = textbook monetization shell.

Permissions Breakdown

• search medium Allows reading and modifying search provider; combined with newtab override, enables search monetization.
• chrome_url_overrides.newtab high Replaces every new tab with extension page; core monetization/surveillance surface.

Pillar Scores

Bookkeeping