Top Risks

• Uninstall URL hijack redirects to yowgames.com — classic traffic-monetization shell pattern.
• Install URL hijack opens yowgames.com on install — confirmed monetization redirect.
• NewTab override + search permission = search-traffic monetization surface on every new tab.
• Privacy policy is Google's own policy, not scoped to this extension; admits data collection and 3rd-party sharing.
• Free-webmail developer (gmail) with no verified business, no publisher badge, linking to yowgames.com game portal.

Evidence

• uninstall_url_hijack manifest chrome.runtime.setUninstallURL points to https://yowgames.com/ — third-party game portal.
• install_url_hijack manifest onInstalled opens https://yowgames.com/fc-barcelona-mosaic-live-wallpaper/ — third-party redirect.
• newtab_override manifest chrome_url_overrides.newtab = index.html; replaces every new tab with extension page.
• generic_privacy_policy store Policy URL is Google's account privacy policy; scope_extension=false, data_collection=true, third_party_sharing=true.
• free_webmail_developer store Developer email afraezgi4@gmail.com; no verified publisher, no featured badge, no business domain.
• js_external_hosts crx 9 external hosts referenced including owhit.com, yowgames.com, and major platforms (Netflix, Instagram, X, YouTube).
• game_portal_shell store Both install and uninstall URLs point to yowgames.com — matches game-portal shell pattern.
• search_permission_newtab_combo manifest search permission + newtab override without verified publisher = search monetization risk.

Permissions Breakdown

• search medium Allows overriding search provider; paired with newtab override amplifies monetization risk.
• chrome_url_overrides.newtab high Replaces new tab page; core mechanism for traffic monetization shells.

Pillar Scores

Bookkeeping