Netskope Extension Risk

Detail view · rubric v3.6
← Back to catalog

Call of Duty Black Ops 3 Live Wallpaper

hbcoidfefbocofajncopoidcoeedahbm
Risk Score
5.59
Risk Level: Medium
Recommendation: 🚫 BLOCK
Category NewTab
Installs 587
Rating 5.0
Last updated 2026-07-07 (2 months ago)
Manifest version MV3
CSP present ❌ no
Developer info@ovkas.com
Verified publisher ❌ no
Featured by Google ❌ no
Privacy policy link
Web Store open ↗

Top Risks

  • Uninstall and install URL both hijacked to gameograf.com affiliate/monetization domain — classic adware shell pattern.
  • NewTab override replaces every new tab; paired with 'search' permission enables search monetization.
  • Privacy policy is Google's generic account policy — not scoped to this extension, admits data collection and third-party sharing.
  • JS contacts google.com, instagram.com, netflix.com, youtube.com, x.com from NewTab page — broad tracking surface on popular sites.
  • No CSP on MV3 extension with newtab override and external JS hosts contacting 6 domains.

Evidence

  • uninstall_url_hijack crx chrome.runtime.setUninstallURL -> gameograf.com with utm_source=ovkas; affiliate monetization on uninstall.
  • install_url_hijack crx onInstalled opens gameograf.com with utm tracking params; monetization shell pattern confirmed.
  • newtab_override manifest chrome_url_overrides.newtab = index.html; every new tab controlled by extension.
  • generic_privacy_policy store Policy URL is Google's account privacy policy; scope_extension=false, data_collection=true, third_party_sharing=true.
  • external_js_hosts crx 6 external hosts contacted: gameograf.com, google.com, instagram.com, netflix.com, youtube.com, x.com.
  • search_permission_newtab_combo manifest 'search' permission + newtab override = search monetization capability.
  • no_csp manifest content_security_policy is null; no CSP protection despite 6 external JS host references.
  • low_install_monetization_shell store 505 installs, game-themed wallpaper framing conceals newtab monetization shell with affiliate redirect hooks.

Permissions Breakdown

  • search medium Allows overriding search behavior; combined with newtab override amplifies search monetization risk.
  • chrome_url_overrides.newtab high Replaces every new tab with extension-controlled page; primary monetization vector.

Pillar Scores

Permissions4.00
Reputation5.00
Network2.00
Webstore10.00
Maintenance0.00
Privacy10.00
Code Quality0.00
CVE Exposure0.00

Operator Siblings (4)

Other extensions sharing this developer's compound fingerprint:

Scoring History

fsssiedxnb2186f9dza'nb2186f9dzsssiedx 5.48 Medium block 2026-09-15
sssiedna23dd008dp727562726963xsx 5.24 Medium review 2026-09-15
fsssiedxn982b8c50za n982b8c50zsssiedx 5.62 Medium review 2026-09-06
sssiedn3ab54ebadp727562726963xsx 5.70 Medium review 2026-09-06
v3.6 5.59 Medium block 2026-09-02

Bookkeeping

Rubric v3.6
Scored at 2026-09-02 11:06
Listing SHA 76e9727c2531…
Force block — not fired
Score recovered no
Elapsed