Top Risks

• THREAT FEED: extension ID independently confirmed malicious by TPCI chrome-mal-ids — Neon City Spider-Man Live Wallpaper [adware] + malext.io malicious_extension_sentry (+2.5, capped).
• Uninstall+install URL hijack both redirect to gameograf.com ad-tech UTM funnel — classic monetization shell.
• NewTab override with search permission: replaces every new tab and can intercept/redirect searches.
• Privacy policy is Google's generic account policy — not scoped to this extension, admits data collection and 3rd-party sharing.
• Developer email is free Gmail with no developer name or business domain; throwaway-identity pattern.

Evidence

• uninstall_url_hijack manifest chrome.runtime.setUninstallURL → gameograf.com with UTM params; textbook ad-monetization redirect.
• install_url_hijack manifest onInstalled opens gameograf.com UTM URL; stacks with uninstall hijack for dual monetization.
• newtab_override manifest chrome_url_overrides.newtab = index.html; every new tab delivered by extension.
• privacy_policy_generic store Policy is Google account policy (scope_extension=false, data_collection=true, third_party_sharing=true). Scores +10.
• free_webmail_no_dev_name store halilseker3455@gmail.com, developer_name empty; no verifiable business identity.
• js_external_hosts crx Extension loads from gameograf.com plus instagram/netflix/youtube/x.com — 6 external hosts across 2 countries.
• new_tab_monetization_shape manifest NewTab + search permission + UTM hijack URLs = monetization-shell fingerprint.
• verified_publisher store Verified publisher badge present; applied -1.0 reputation discount (capped: free webmail + monetization signals).
• threat_feed_membership api Extension ID listed by TPCI chrome-mal-ids — Neon City Spider-Man Live Wallpaper [adware] + malext.io malicious_extension_sentry; score 5.49 -> 7.99 (+2.5 cap 2.5).

Permissions Breakdown

• search medium Allows reading/modifying search queries; concerning paired with NewTab override.
• chrome_url_overrides.newtab high Replaces every new tab page; prime monetization/redirect surface for ad-tech.

Pillar Scores

Bookkeeping