Call of Duty Black Ops 3 Live Wallpaper
hbcoidfefbocofajncopoidcoeedahbm
Risk Score
5.59
Risk Level:
Medium
Recommendation:
🚫 BLOCK
Top Risks
- Uninstall and install URL both hijacked to gameograf.com affiliate/monetization domain — classic adware shell pattern.
- NewTab override replaces every new tab; paired with 'search' permission enables search monetization.
- Privacy policy is Google's generic account policy — not scoped to this extension, admits data collection and third-party sharing.
- JS contacts google.com, instagram.com, netflix.com, youtube.com, x.com from NewTab page — broad tracking surface on popular sites.
- No CSP on MV3 extension with newtab override and external JS hosts contacting 6 domains.
Evidence
- uninstall_url_hijack crx chrome.runtime.setUninstallURL -> gameograf.com with utm_source=ovkas; affiliate monetization on uninstall.
- install_url_hijack crx onInstalled opens gameograf.com with utm tracking params; monetization shell pattern confirmed.
- newtab_override manifest chrome_url_overrides.newtab = index.html; every new tab controlled by extension.
- generic_privacy_policy store Policy URL is Google's account privacy policy; scope_extension=false, data_collection=true, third_party_sharing=true.
- external_js_hosts crx 6 external hosts contacted: gameograf.com, google.com, instagram.com, netflix.com, youtube.com, x.com.
- search_permission_newtab_combo manifest 'search' permission + newtab override = search monetization capability.
- no_csp manifest content_security_policy is null; no CSP protection despite 6 external JS host references.
- low_install_monetization_shell store 505 installs, game-themed wallpaper framing conceals newtab monetization shell with affiliate redirect hooks.
Permissions Breakdown
- search medium Allows overriding search behavior; combined with newtab override amplifies search monetization risk.
- chrome_url_overrides.newtab high Replaces every new tab with extension-controlled page; primary monetization vector.
Pillar Scores
Permissions4.00
Reputation5.00
Network2.00
Webstore10.00
Maintenance0.00
Privacy10.00
Code Quality0.00
CVE Exposure0.00
Operator Siblings (4)
Other extensions sharing this developer's compound fingerprint:
Scoring History
| fsssiedxnb2186f9dza'nb2186f9dzsssiedx | 5.48 | Medium | block | 2026-09-15 |
| sssiedna23dd008dp727562726963xsx | 5.24 | Medium | review | 2026-09-15 |
| fsssiedxn982b8c50za n982b8c50zsssiedx | 5.62 | Medium | review | 2026-09-06 |
| sssiedn3ab54ebadp727562726963xsx | 5.70 | Medium | review | 2026-09-06 |
| v3.6 | 5.59 | Medium | block | 2026-09-02 |
Bookkeeping
Rubric v3.6
Scored at 2026-09-02 11:06
Listing SHA
76e9727c2531…
Force block
— not fired
Score recovered
no
Elapsed
—