Top Risks

• THREAT FEED: extension ID independently confirmed malicious by TPCI chrome-mal-ids — Black Ironman Live Wallpaper [adware] + malext.io malicious_extension_sentry (+2.5, capped).
• Generic Google privacy policy admits 3rd-party sharing without scoping to extension.
• Part of a 13-sibling extension cluster operated by the same fingerprint.
• Uninstall and install URL hijacks redirect to gameograf.com with tracking parameters.
• NewTab override with search permission enables potential traffic monetization.

Evidence

• privacy_policy_classification api Fetched policy is generic Google, scope_extension=false, data_collection=true, third_party_sharing=true.
• operator_cluster api 13 sibling extensions share compound fingerprint including dev email and CSP host set.
• uninstall_url_hijack store chrome.runtime.setUninstallURL() redirects to gameograf.com with utm tracking parameters.
• install_url_hijack store onInstalled opens gameograf.com with utm tracking parameters.
• chrome_url_overrides.newtab manifest Overrides new tab page to newtab.html.
• csp_present == false crx No content_security_policy in manifest; MV3 default applies but no explicit restrictions.
• dom_sink_innerhtml_userctrl crx innerHTML assignment from variable in popup.js without CSP.
• verified_publisher store Verified publisher but discount capped at -1.0 due to 16mo stale and monetization shape.
• threat_feed_membership api Extension ID listed by TPCI chrome-mal-ids — Black Ironman Live Wallpaper [adware] + malext.io malicious_extension_sentry; score 7.08 -> 9.58 (+2.5 cap 2.5).

Permissions Breakdown

• chrome_url_overrides.newtab medium Overrides new tab page, enabling traffic monetization or search redirection.
• search low Search provider access, generally low risk unless combined with overrides.
• host_permissions: https://api.gameograf.com/* medium Host access to developer API for new tab functionality.

Pillar Scores

Operator Siblings (13)

Other extensions sharing this developer's compound fingerprint:

• kenndofkbpgkfhaecjmnjmehhhbnioeh
• ieepfmpmjnjidennkopcbamjjdemhjcf
• chjbfnbpbgjnofhahgblpcifjcbkolcp
• bpicplogeibhabicoedobpchdkngbhjh
• jmokcnonladmkkdlgbalffkjiogfcgha
• aaobffjniaghknbgjdkigmcnapghemfa
• cfbobdhebljlbkhdhnikebhhijocphfo
• ckcailiifgopnblmaeaefimdgnaelcph
• dpkgeginpcjfcgnjicpkfkkbnpailidn
• jimikjehahhdekhbmhpbmbponjcimajc
• jofgjibhmlaeofgmidllemkckkpgnpbd
• iimgbphfdpnahafdmikdjnpfnffnbkcl
• gafbkkfalgndkoilabfhmjjjgeihboed

Bookkeeping