Top Risks

• NewTab override hijacks every new tab; uninstall/install URL hijack confirms monetization shell pattern.
• Privacy policy URL unreachable (fetch error) — treated as no policy; data handling completely unknown.
• Operator cluster: 4 compound siblings, 11 dev-email siblings — bulk NewTab shell factory.
• innerHTML DOM-XSS sink in popup.js with no CSP; elevated XSS risk.
• 15 months since last update with newtab override and no CSP — stale high-surface extension.

Evidence

• newtab_override manifest chrome_url_overrides.newtab = newtab.html; replaces every new tab page.
• install_uninstall_url_hijack manifest Both onInstalled and uninstall redirect to gameograf.com UTM URLs — confirmed monetization shell.
• operator_cluster api 4 compound siblings, 11 dev-email siblings under info@gameograf.com — bulk extension factory.
• privacy_policy_fetch_error api Privacy policy URL returned HTTPError; classified as fetched=false → scored as no policy (+10.0).
• dom_sink_innerhtml crx popup.js assigns innerHTML from variable with no CSP present — DOM-XSS risk.
• no_csp manifest content_security_policy is null; MV3 default applies but no explicit hardening.
• stale_newtab store 15 months since last update on a NewTab override extension with active user-facing surface.
• verified_publisher store Verified publisher badge present; caps but does not negate monetization shell signals.

Permissions Breakdown

• search medium Allows overriding search provider; medium monetization risk in NewTab shells.
• host_permissions: https://api.gameograf.com/* low Scoped to developer's own API domain; expected for wallpaper fetch.
• chrome_url_overrides.newtab medium Replaces every new tab; primary monetization surface for this category.

Pillar Scores

Operator Siblings (13)

Other extensions sharing this developer's compound fingerprint:

• kenndofkbpgkfhaecjmnjmehhhbnioeh
• ieepfmpmjnjidennkopcbamjjdemhjcf
• chjbfnbpbgjnofhahgblpcifjcbkolcp
• bpicplogeibhabicoedobpchdkngbhjh
• aaobffjniaghknbgjdkigmcnapghemfa
• cfbobdhebljlbkhdhnikebhhijocphfo
• ckcailiifgopnblmaeaefimdgnaelcph
• dpkgeginpcjfcgnjicpkfkkbnpailidn
• hmagnnippelpfgkmbdnepolcgjlmbohh
• jimikjehahhdekhbmhpbmbponjcimajc
• jofgjibhmlaeofgmidllemkckkpgnpbd
• iimgbphfdpnahafdmikdjnpfnffnbkcl
• gafbkkfalgndkoilabfhmjjjgeihboed

Bookkeeping