Top Risks

• THREAT FEED: extension ID independently confirmed malicious by TPCI chrome-mal-ids — Audi R8 Live Wallpaper [adware] + malext.io malicious_extension_sentry (+2.5, capped).
• Privacy policy is a generic Google policy admitting data collection & 3rd-party sharing without scoping to this extension
• Part of a 15-sibling extension cluster with install/uninstall URL hijacks
• Uninstall and install URL hijacks redirect to developer site with tracking parameters
• No CSP present (MV3 default applies, but no explicit policy declared)

Evidence

• privacy_policy_classification api fetched=true, scope_extension=false, data_collection=true, third_party_sharing=true -> +10.0
• operator_cluster api sibling_count=15 under compound fingerprint -> +2.5
• uninstall_url_hijack manifest chrome.runtime.setUninstallURL() to 3rd party gameograf.com -> +3.0
• install_url_hijack manifest onInstalled opens 3rd-party gameograf.com URL -> +2.0
• csp_present crx No content_security_policy declared; MV3 strict-default applies
• code_findings_raw crx 2x dom_sink_innerhtml_userctrl; csp_present=false, no eval/Function present -> +1.0 total
• verified_publisher store Verified publisher; discount capped at -1.0 due to throwaway signals (stale>18mo or monetization)
• host_permissions manifest host_permissions: https://api.gameograf.com/* -> +1.0
• threat_feed_membership api Extension ID listed by TPCI chrome-mal-ids — Audi R8 Live Wallpaper [adware] + malext.io malicious_extension_sentry; score 7.46 -> 9.96 (+2.5 cap 2.5).

Permissions Breakdown

• chrome_url_overrides.newtab medium Overrides new tab page, enabling monetization or search redirection.
• search low Search provider configuration; low risk unless paired with override.
• host_permissions: https://api.gameograf.com/* medium Grants programmatic access to developer's backend API.

Pillar Scores

Operator Siblings (15)

Other extensions sharing this developer's compound fingerprint:

• kbbpgbdclanolnidddbeolaaddllgebp
• kgdahhodabbdnkkphjpneoiadhdphhna
• dihbfoicmibapnfojehonedckdjhegbe
• gfgopigkkjcinmgoancipefafljdfghd
• cdmooeifaodbcailnibfpnmbighehpkj
• pjbnoadhjobchdjkfhpehlbigakbjfii
• jpmpdfcaaelghoomjgdebmoekdfkhabp
• ohpdpicjlgbpihginhijhkfdcgfbffgf
• cifonlmfhnimmghojdepepjdgbbminel
• dbomdodikcfpocimcpegpbnlmankljcb
• dmdfahkplmikmlboodadelolcmbjgmff
• ckodcbbdgmpjidpfcipfobfagemmfapi
• kbolkhdnpodncbepmdejjijgkdpedgcj
• gfbhidjkgiaopiekkefehamhcmigdcna
• ekmpmfdhakdjaaifkfgpbcagdhlbamki

Bookkeeping