Top Risks

• Uninstall AND install URL both hijack to gameograf.com with UTM tracking — confirmed monetization shell.
• NewTab override replaces every new tab; combined with 'search' permission forms ad-redirect surface.
• Privacy policy is Google's own generic policy — scope_extension=false, does not cover this extension at all.
• Developer uses free Gmail with no business domain; gameograf.com is a game-portal affiliate site.
• Privacy policy admits data collection and third-party sharing with no scope to this extension (+10 privacy).

Evidence

• install_url_hijack crx onInstalled opens gameograf.com with UTM params utm_source/medium/campaign/content=ovkas.
• uninstall_url_hijack crx setUninstallURL points to gameograf.com with same UTM tracking params.
• newtab_override manifest chrome_url_overrides.newtab = index.html replaces every new tab with extension page.
• privacy_policy_generic store Policy URL is Google's account privacy page; scope_extension=false, data_collection=true, third_party_sharing=true.
• free_webmail_developer store Developer email fatihkaran600@gmail.com; no business domain; dev name Ovkas links to gameograf.
• game_portal_shell crx js_external_hosts includes gameograf.com alongside google/instagram/netflix/youtube/x.com.
• search_permission_newtab_combo manifest search permission + newtab override = classic search-monetization shell fingerprint.
• csp_absent_mv3 manifest content_security_policy is null; csp_present=false on MV3 extension.

Permissions Breakdown

• search medium Allows overriding search provider; combined with newtab override forms monetization shell.
• chrome_url_overrides.newtab high Replaces every new tab with extension page; primary monetization/tracking surface.

Pillar Scores

Bookkeeping