Top Risks

• Privacy policy URL fetch failed — no verifiable data-handling disclosure; scored as no policy.
• Uninstall and install URL hijacks redirect to gameograf.com for tracking/monetization.
• Operator cluster: 6 sibling extensions share same dev email/install/uninstall URL pattern.
• NewTab override with search permission is a monetization-shell pattern.
• No CSP declared (MV3 default mitigates somewhat) combined with innerHTML DOM-XSS sink.

Evidence

• privacy_policy_fetch_failed api Privacy policy URL returned HTTPError; treated as fetched==false → +10.0 privacy pillar.
• uninstall_url_hijack crx setUninstallURL → gameograf.com with UTM params; +3.0 webstore.
• install_url_hijack crx onInstalled opens gameograf.com with UTM params; +2.0 webstore.
• operator_cluster_siblings api sibling_count=3 compound; dev_email shares 6 extensions. +2.5 webstore.
• newtab_override_with_search manifest chrome_url_overrides.newtab + search permission; NewTab monetization shape.
• dom_sink_innerhtml_userctrl crx popup.js innerHTML assignment; csp_present==false elevates to +2.0 code quality (FIX B).
• verified_publisher store Verified publisher badge present; -3.0 reputation but months_since_update=15 triggers 0c cap at -1.0.
• maintenance_stale store 15 months since update → 12-24mo band → +6.0 maintenance pillar.

Permissions Breakdown

• search medium Allows reading/modifying search queries; relevant for NewTab monetization via search.
• host_permissions: https://api.gameograf.com/* low Scoped to own API domain only; narrows network surface.
• chrome_url_overrides: newtab medium Replaces new-tab page; primary mechanism for this extension category.

Pillar Scores

Operator Siblings (13)

Other extensions sharing this developer's compound fingerprint:

• kenndofkbpgkfhaecjmnjmehhhbnioeh
• chjbfnbpbgjnofhahgblpcifjcbkolcp
• bpicplogeibhabicoedobpchdkngbhjh
• jmokcnonladmkkdlgbalffkjiogfcgha
• aaobffjniaghknbgjdkigmcnapghemfa
• cfbobdhebljlbkhdhnikebhhijocphfo
• ckcailiifgopnblmaeaefimdgnaelcph
• dpkgeginpcjfcgnjicpkfkkbnpailidn
• hmagnnippelpfgkmbdnepolcgjlmbohh
• jimikjehahhdekhbmhpbmbponjcimajc
• jofgjibhmlaeofgmidllemkckkpgnpbd
• iimgbphfdpnahafdmikdjnpfnffnbkcl
• gafbkkfalgndkoilabfhmjjjgeihboed

Bookkeeping