Top Risks

• THREAT FEED: extension ID independently confirmed malicious by TPCI chrome-mal-ids — Wednesday Live Wallpapers New Tab [adware] + malext.io malicious_extension_sentry (+2.5, capped).
• Privacy policy URL fetch failed — no verifiable data-handling disclosure; scored as no policy.
• Uninstall and install URL hijacks redirect to gameograf.com for tracking/monetization.
• Operator cluster: 6 sibling extensions share same dev email/install/uninstall URL pattern.
• NewTab override with search permission is a monetization-shell pattern.

Evidence

• privacy_policy_fetch_failed api Privacy policy URL returned HTTPError; treated as fetched==false → +10.0 privacy pillar.
• uninstall_url_hijack crx setUninstallURL → gameograf.com with UTM params; +3.0 webstore.
• install_url_hijack crx onInstalled opens gameograf.com with UTM params; +2.0 webstore.
• operator_cluster_siblings api sibling_count=3 compound; dev_email shares 6 extensions. +2.5 webstore.
• newtab_override_with_search manifest chrome_url_overrides.newtab + search permission; NewTab monetization shape.
• dom_sink_innerhtml_userctrl crx popup.js innerHTML assignment; csp_present==false elevates to +2.0 code quality (FIX B).
• verified_publisher store Verified publisher badge present; -3.0 reputation but months_since_update=15 triggers 0c cap at -1.0.
• maintenance_stale store 15 months since update → 12-24mo band → +6.0 maintenance pillar.
• threat_feed_membership api Extension ID listed by TPCI chrome-mal-ids — Wednesday Live Wallpapers New Tab [adware] + malext.io malicious_extension_sentry; score 5.11 -> 7.61 (+2.5 cap 2.5).

Permissions Breakdown

• search medium Allows reading/modifying search queries; relevant for NewTab monetization via search.
• host_permissions: https://api.gameograf.com/* low Scoped to own API domain only; narrows network surface.
• chrome_url_overrides: newtab medium Replaces new-tab page; primary mechanism for this extension category.

Pillar Scores

Operator Siblings (13)

Other extensions sharing this developer's compound fingerprint:

• kenndofkbpgkfhaecjmnjmehhhbnioeh
• chjbfnbpbgjnofhahgblpcifjcbkolcp
• bpicplogeibhabicoedobpchdkngbhjh
• jmokcnonladmkkdlgbalffkjiogfcgha
• aaobffjniaghknbgjdkigmcnapghemfa
• cfbobdhebljlbkhdhnikebhhijocphfo
• ckcailiifgopnblmaeaefimdgnaelcph
• dpkgeginpcjfcgnjicpkfkkbnpailidn
• hmagnnippelpfgkmbdnepolcgjlmbohh
• jimikjehahhdekhbmhpbmbponjcimajc
• jofgjibhmlaeofgmidllemkckkpgnpbd
• iimgbphfdpnahafdmikdjnpfnffnbkcl
• gafbkkfalgndkoilabfhmjjjgeihboed

Bookkeeping